Windows/AD-SPN-Delegation
- Looking at AD user for a Service Account, no [Delegation] tab.
Need to add the delegation to the Service account, in CMD(Administrator) on DC
C:\Windows\system32>setspn -a http/aws-server-01.comp.com SVC_App Checking domain DC=comp,DC=com Registering ServicePrincipalNames for CN=SVC_APP,OU=Service Accounts,OU=Users,OU=Production,DC=comp,DC=com http/aws-server-01.comp.com Updated object C:\Windows\system32>setspn -l SVC_App Registered ServicePrincipalNames for CN=SVC_App,OU=Service Accounts,OU=Users,OU=Production,DC=comp,DC=com: http/aws-server-01.comp.com http/aws-server-01 C:\Windows\system32>