= Windows/AD-SPN-Delegation = * Looking at AD user for a Service Account, no [Delegation] tab. * Need to add the delegation to the Service account, in CMD(Administrator) on DC {{{ C:\Windows\system32>setspn -a http/aws-server-01.comp.com SVC_App Checking domain DC=comp,DC=com Registering ServicePrincipalNames for CN=SVC_APP,OU=Service Accounts,OU=Users,OU=Production,DC=comp,DC=com http/aws-server-01.comp.com Updated object C:\Windows\system32>setspn -l SVC_App Registered ServicePrincipalNames for CN=SVC_App,OU=Service Accounts,OU=Users,OU=Production,DC=comp,DC=com: http/aws-server-01.comp.com http/aws-server-01 C:\Windows\system32> }}}