http://www.iis.net/downloads/default.aspx?tabid=34&g=6&i=1887
Requirements:
- Needs to be setup as a virtual directory in IIS.
- Requires .NET framework 2.0 or higher configured on the virtual directory.
Notable Features:
- Supports IIS 7.0 (useKernelMode / useAppPoolCredentials)
- Allows adding backend servers of type UNC, HTTP, LDAP, OLAP, SQL, SSAS, and RDP
- Allows chaining of multiple hops (versus only a single backend)
- Performs duplicate SPN check against all trusted domains.
- /Set/SPNs.aspx - Allows adding and removing of ServicePrincipalNames
- /Set/Delegation.aspx - Allows changing Trust for Delegation settings.
- /Set/Providers.aspx - Allows correcting of inadequate NTAuthenticationProviders settings.
- /Report.aspx - Gives a picture of what is right and what is wrong.
- /Wizard.aspx - A set of wizard steps that supports adding more tiers to /Report.aspx.
- /Test.aspx - Allows double-hop tests for webServer-to-Sql or webServer-to-fileServer or webServer-to-webServer
Changes:
- 7/15/2009 - Fixed problem with error stating IIS machine is not joined to a domain caused by HttpContext.Current being null on background threads.
- 7/15/2009 - Added support for IIS 7.5's "ApplicationPoolIdentity" (Managed Service Accounts)
- 7/27/2009 - Added code to strip leading slashes from the "hostName" entered into the wizard
- 8/24/2009 - Fixed SetSPN.exe syntax suggested on Report.aspx
- 8/24/2009 - Disabled ViewState on Test.aspx textboxes to address "HttpRequestValidationException"
- 8/26/2009 - Now pass results of DomainController.FindOne to DirectoryEntry instead of NetBIOS domain names
- 9/03/2009 - Added client-side javascript to Test.aspx to delete textbox value during postback. This fixes "dangerous characters" problem.
- 9/30/2009 - Added a Search.aspx to allow searching of specific SPNs... for those that don't trust the Report.aspx output (you know who you are)
- 11/16/2009 - Removed "Fix this for me" button when using an IP address for a host name.
- 11/16/2009 - When a machine name cannot be determined for a DNS name, an additional suggestion is made regarding load balancing.
- 11/19/2009 - Made a change to address the NullReferenceException being thrown due to code changes from 11/16
- 12/03/2009 - Changed some code from TheadPool.QueueUserWorkItem to Page.RegisterAsyncTask to avoid potential for crash in msvcrt!_purecall.
- 8/11/2010 - Fixed problem with report.aspx saying to set SPNs on appPool user instead of machine account.