Symptoms

K2 Windows Token Service
 

Diagnoses

Configuration Analysis reports that Constrained Delegation is not enabled for the active directory account BLACKPEARL.

There is no such account used in the environment. Constrained delegation has been set for the service account that is being used however that did not correct the configuration analysis error.
 

Resolution


To resolve this issue we
1) Looked at and corrected the spn settings for the k2 service account.
2) After correcting those we corrected the spn settings for the share point service account.
3) Updated the delegation settings for the K2 service account
4) Updated the delegation settings for the share point service account
5) Updated the delegation settings for the k2 server on the active directory server
6) Then we ran the k2 setup to reconfigure and make sure everything was correct, during the setup we made sure the share point service account was correct and matched the spn's that were created earlier.
7) The setup completed and the configuration analysis passed the k2 windows token service check point.