Does anyone in the forum has any experience with setting up delegation through impersonation for managing linked server security? In essence, we would like to use the windows domain accounts we use to connect to the SQL Server A to be used when we connect to a linked server B. This way each user will assume the same permissions on server B, and would reduce the need for faceless accounts. However this setup requires delegation to be setup so the SQL Service can forward the windows user credentials to the resource SQL Server. I see an article in BOL on how to set it up : "Security Account Delegation". There is also an article in SQL Server Mag (Mar 2002), however the article in SQL Mag contradicts some statements in the article (namely the need for SPN : Service Principal Name setup). I would like to get some feedback from anyone with hands on experience on this issue.