In Microsoft Internet Security and Acceleration (ISA) Server 2006, you publish a Web site by using Kerberos Constrained Delegation. Depending on the Web site, you may want to change how ISA Server requests the Kerberos ticket of an authenticated user.
By default, ISA Server 2006 uses the "Domain NETBIOS name\User" format when it requests the Kerberos ticket. Therefore, the domain name and the user name in the Kerberos ticket will resemble the following:
By default, ISA Server 2006 uses the "Domain NETBIOS name\User" format when it requests the Kerberos ticket. Therefore, the domain name and the user name in the Kerberos ticket will resemble the following:
User: FirstName.LastName
Realm: MyCompany
However, some Web sites require the fully qualified domain name (FQDN) in the Kerberos ticket. In this scenario, the domain name and the user name in the Kerberos ticket should resemble the following: Realm: MyCompany
User: FirstName.LastName
Realm: MyCompany.EMEA.INTRA
Realm: MyCompany.EMEA.INTRA