Tell me more ×  I've got a problem getting Windows
Authentication (Kerberos) to work when passing credentials from
the user, to IIS then from IIS to SQL. I have setup SPN's for
SQL, and set the IIS server account up to allow delegation.  If
I set the IIS computer account to allow Delegation for any
service, it works: alt text  However if I set it up for specific
services, the credentials are not passed and I get an error
about connecting with the anonymous user:  alt text  As you can
see, I'm connecting to SQL Express Instance, and I've set up a
number of SPN's to try and resolve this, no luck with any of
them. Obviously the fact that it works when allowing any
service, says to me that something else is missing from this
list of services, but I don't know what!  share|improve this
question add comment  2 Answers  up vote 4 down vote accepted
For anyone else that may come across this problem, the issue was
down to using Kernal Mode authentication, with a domain user
account for the app pool account.  Kernel m