title: Kerberos Delegation Failed for Users from a trusted domain
body: <p>I have successfully setup the Kerberos Delegation between a ASP.Net web site and a SQL Server. All the users in the same domain of the IIS application pool account and SQL Server service account can be delegated from the web site to SQL server. Now we have users from a two-way trusted domain try to use the web site, and the following error occurred at the SQL Server side: "Login failed for user 'NT AUTHORITY\ANONYMOUS LOGON'. It means the delegation has failed.</p>
  
  <p>The web site is IIS 6 on Windows 2003. </p>
  
  <p>I checked the user from the trusted domain, and the "userAccountControl" is 512 so delegation is not blocked. In the user IE browser settings, I can the "Local Intranet" has been configured right.</p>
  
  <p>Can someone tell me how I can troubleshoot this issue?</p>
  
  <p>Thanks!</p>
  
  <p>Richard</p>