If you have been configuring Kerberos, you are aware of setting up delegation on computer and service accounts. I recently tried to configure this on a Windows 2008 Domain Controller and was confused as to why the delegation tab was missing. I went through the usual checking of the Domain Functional Level to ensure it was set to at least Windows 2003, but was still unable to see the delegation tab for my service account. I was however, able to access the tab for a computer account. After further investigation, I discovered that the delegation tab will not appear until the account has a servicePrincipalName or SPN. Once I added the appropriate SPN to the account, the delegation tab was accessible.
My name is Bobby Shea and I am an Infrastructure Practice Team Lead for EMC Application Consulting. When I am not working I enjoy riding my motorcycle with my wife, spending time with my family, watching NHL Hockey and exploring new technology.