> Hi there...
>
> We are having problems with constrained delegation on Vs 2005 R2 Ent.
> It is set up correctly according to the install docs for separate
> vssrvc from the web service. The server with the vssrvc is a DC, and
> we don't want to install IIS for security reasons. The web service is
> installed on an internal web server (on the same network) and was set
> up using Local System for the identity. The SPN's look like:
> DC (vssrvc server):
> vsmrc/dcname.domainname.corp:5900
> vsmrc/dcname:5900
> vssrvc/dcname.domainname.corp
> vssrvc/dcname
> Web Server:
> HTTP/webservername
> HTTP/webservername.domainname.corp
> (Those are needed for constrained delegation in Sharepoint, which is
> on the same web server, but in a different virtual server/app pool).
>
> When I hit the web site for VS, I get the following error:
> Could not connect to the Virtual Server on "dcname". Access was
> denied.
> You can specify an alternate Virtual Server below.
>
> This all of a sudden did start working, without any changes, for a
> short period of time, before we found out that Sharepoint had stopped
> working correctly for checking files in and out. Restarting IIS fixed
> the Sharepoint issue, but now VS stopped working and it hasn't started
> working again.
>
> Delegation on the web server is set to "Trust this computer for
> delegation to any service (Kerberos only).
> Delegation on the DC (vssrvc) is set to "Trust this computer for
> delegation to the specified services only" with "Use any
> authentication protocol" and service typesof "cifs, vsmrc, and
> vssrvc".
>
> Does anyone have any ideas?

> On Apr 26, 7:17 pm, Jerry <(email address - cut out)> wrote:
>
> > Hi there...
>
> > We are having problems with constrained delegation on Vs 2005 R2 Ent.
> > It is set up correctly according to the install docs for separate
> > vssrvc from the web service. The server with the vssrvc is a DC, and
> > we don't want to install IIS for security reasons. The web service is
> > installed on an internal web server (on the same network) and was set
> > up using Local System for the identity. The SPN's look like:
> > DC (vssrvc server):
> > vsmrc/dcname.domainname.corp:5900
> > vsmrc/dcname:5900
> > vssrvc/dcname.domainname.corp
> > vssrvc/dcname
> > Web Server:
> > HTTP/webservername
> > HTTP/webservername.domainname.corp
> > (Those are needed for constrained delegation in Sharepoint, which is
> > on the same web server, but in a different virtual server/app pool).
>
> > When I hit the web site for VS, I get the following error:
> > Could not connect to the Virtual Server on "dcname". Access was
> > denied.
> > You can specify an alternate Virtual Server below.
>
> > This all of a sudden did start working, without any changes, for a
> > short period of time, before we found out that Sharepoint had stopped
> > working correctly for checking files in and out. Restarting IIS fixed
> > the Sharepoint issue, but now VS stopped working and it hasn't started
> > working again.
>
> > Delegation on the web server is set to "Trust this computer for
> > delegation to any service (Kerberos only).
> > Delegation on the DC (vssrvc) is set to "Trust this computer for
> > delegation to the specified services only" with "Use any
> > authentication protocol" and service typesof "cifs, vsmrc, and
> > vssrvc".
>
> > Does anyone have any ideas?
>
> We have set up the web service on another machine and are getting the
> same error. Does anyone have any ideas?

> On Apr 27, 2:25 pm, Jerry <(email address - cut out)> wrote:
>
>
>
> > On Apr 26, 7:17 pm, Jerry <(email address - cut out)> wrote:
>
> > > Hi there...
>
> > > We are having problems with constrained delegation on Vs 2005 R2 Ent.
> > > It is set up correctly according to the install docs for separate
> > > vssrvc from the web service. The server with the vssrvc is a DC, and
> > > we don't want to install IIS for security reasons. The web service is
> > > installed on an internal web server (on the same network) and was set
> > > up using Local System for the identity. The SPN's look like:
> > > DC (vssrvc server):
> > > vsmrc/dcname.domainname.corp:5900
> > > vsmrc/dcname:5900
> > > vssrvc/dcname.domainname.corp
> > > vssrvc/dcname
> > > Web Server:
> > > HTTP/webservername
> > > HTTP/webservername.domainname.corp
> > > (Those are needed for constrained delegation in Sharepoint, which is
> > > on the same web server, but in a different virtual server/app pool).
>
> > > When I hit the web site for VS, I get the following error:
> > > Could not connect to the Virtual Server on "dcname". Access was
> > > denied.
> > > You can specify an alternate Virtual Server below.
>
> > > This all of a sudden did start working, without any changes, for a
> > > short period of time, before we found out that Sharepoint had stopped
> > > working correctly for checking files in and out. Restarting IIS fixed
> > > the Sharepoint issue, but now VS stopped working and it hasn't started
> > > working again.
>
> > > Delegation on the web server is set to "Trust this computer for
> > > delegation to any service (Kerberos only).
> > > Delegation on the DC (vssrvc) is set to "Trust this computer for
> > > delegation to the specified services only" with "Use any
> > > authentication protocol" and service typesof "cifs, vsmrc, and
> > > vssrvc".
>
> > > Does anyone have any ideas?
>
> > We have set up the web service on another machine and are getting the
> > same error. Does anyone have any ideas?
>
> Dumb question, but when you installed the admin interface did you
> choose the option to "Alway run Admin www site as local systea
> ccount", it is the second option?
>
> Toddhttp://www.hyperadmin.com/