Linked SQL Server Issue
This is the classic &quot;Double Hop&quot; problem.  Several pieces need to be in place for this to work. For server1 (SSMS) -&gt; server2 (SQL) -&gt; server3 (sql)

server2 must have a SPN
server3 must have a SPN
server2 must be allowed to delegate permissions to server3

A SPN (Server Principal Name) is set in Active Directory on an account and basically ties a service to that account.  e.g.  MSSQL Server on SERVER2 is running as domain\sql_server.  When you connect with Kerberos, You request a ticket from the DC to connect to &quot;MSSQL Server on SERVER2&quot;.  The DC replies with a ticket is can only be un-encrypted by domain\sql_server.
SQL Server will attempt to self-register an SPN when it starts.  This is logged in the ERRORLOG

The SQL Server Network Interface library successfully registered the Service Principal Name (SPN) [ MSSQLSvc/MYLAPTOP:1433 ] for the SQL Server service.
The SQL Server Network Interface library successfully registered the Service Principal Name (SPN) [ MSSQLSvc/MYLATOP ] for the SQL Server service.
SQL Server is attempting to register a Service Principal Name (SPN) for the SQL Server service. Kerberos authentication will not be possible until a SPN is registered for the SQL Server service. This is an informational message. No user action is required.

Verify that you can connect from server1 to server2/3 using Kerberos authentication:

remote into server1
connect using SSMS to server2
Run this:


select auth_scheme from sys.dm_exec_connections where session_id =
@@spid


If it returns NTLM, then you are either missing the SPN on server2 or you have a duplicate SPN.  If it returns &quot;Kerberos&quot; then congratulations, you're partially there.

Repeat this test by trying to connect from server1 to server3.


Once you can successfully connect to both server2 and server3 using Kerberos, you need to ensure that the accounts that SQL is running as have permissions to delegate.  This is an active directory setting that is on the service account SQL is running as.