Configuring constrained delegation with kerberos in hyper-v

Quick script to setup kerberos migration between a list of nodes

Import-Module Hyper-V

$hosts = @("node-01", "node-02");
$services;

foreach($name in $hosts) {
  $services = $services + @("Microsoft Virtual System Migration 
  Service/$name", "cifs/$name")
}

foreach($name in $hosts) {
  $account = Get-ADComputer $name;
  $account | Set-ADObject -Add @{"msDS-AllowedToDelegateTo"=$services};
  Set-ADAccountControl $account -TrustedToAuthForDelegation $true;
}

About: Rob


Leave a Reply

Your email address will not be published. Required fields are marked *