Unable to enable Kerberos Unconstrained/Constrained Delegation in Managed AD

tomq42
New Member

I've spun up a Managed Active Directory in GCP, along with a couple of servers with the aim of testing out some functionality related to Active Directory constrained and unconstrained delegation.

However, it appears I don't have permissions to enable this. It's unclear whether this is deliberate or not.

I am logged on as the domain "setupadmin" account. I use the Active Directory Users and Computers application to attempt to enable constrained delegation on a server like so:

tomq42_0-1712586459900.png

On Apply, I get "Access is denied":

tomq42_1-1712586503648.png

Is this is a deliberate restriction? Am I going to need to set up an Active Directory manually in GCP to test this out?

Thanks.

(Managed AD is listed under Security, but no appropriate label exists, so if there is a more appropriate place for this then let me know)

0 0 44