Set up the Target Service Principal Name (SPN) for the Exchange Server.

If there are multiple EAS servers in an array, you must create an Alternate Service Account (ASA) in the Active Directory and then continue with Assigning Delegation Rights to the Service Account. If you have only one EAS or CAS server in your environment follow the instructions:

Procedure

  1. If the SEG is not referring to the Exchange server by its Fully Qualified Domain Name (FQDN) or its Machine Name, create a SPN for your Domain Controller to allow delegation by the service account.
    If the SEG is referring to the Exchange server by its Fully Qualified Domain Name (FQDN) or its Machine Name, skip this step.
  2. To set the SPN, open a command line window from a server on the domain being authenticated to and run the following command.
     setspn -s HTTP/{EX_DNS_NAME} {EX_MACHINE_NAME}
    Wherever {EX_DNS_NAME} is the name, the SEG uses it to refer to the Exchange server and {EX_MACHINE_NAME} is the actual machine name of the Exchange server, you must select this SPN when assigning delegation rights to the Service Account.