Yes,I've seen that enough as well. I see both sides of the security mirror. Often I've been in an IT department with very experienced folks and DBAs and they tell me they have never heard of delegation issues. I blame the "VENDOR" for not educating the professionals.

Some of the deployment guides are very general and scanty. A friend of mine, Mark gives a great talk on Windows Logins which is way past the "logging into the machine" stage.

He is way into the packet area of the subject.

A few years back, we had many double hop Kerberos issues on SQL based application servers.

His talks really helped me understand the issues.

Seems I learn something new everyday from some one here or some place else.