Windows Admin Center - Constrained Delegation

[mitchell1981]

Hi All,

 

Not sure if I'm minunderstanding how Windows Admin Center (as a gateway) is supposed to work.

 

I've got WAC installed on a Server 2022 VM. I've followed the guides, and run the scripts to set up the constrained delegation for every server I want to manage.

 

If I access WAC on the WAC server everything works as expected. I can connect to all the servers using SSO credentials.

 

If I access WAC from my admin machine I can sign in to WAC no problem, but the connections to the servers fail and I get advised that I may need to set up constrained delegation, despite having already done it.

 

Is this the way it is supposed to behave? I'm using the same user account for both attempts. I can't see myself using WAC if I have to constantly sign in all the time.

 

Thanks.

[jthompson]

I just provide suitable credentials at each WAC session, rather than using any SSO. The account I use is a member of Protected Users, which I believe would prevent it from working with constrained delegation anyway.