• Windows
• AD-SPN-Delegation

Windows/AD-SPN-Delegation

• Looking at AD user for a Service Account, no [Delegation] tab.

  • Need to add the delegation to the Service account, in CMD(Administrator) on DC

    C:\Windows\system32>setspn -a http/aws-server-01.comp.com SVC_App
    Checking domain DC=comp,DC=com
    
    Registering ServicePrincipalNames for CN=SVC_APP,OU=Service Accounts,OU=Users,OU=Production,DC=comp,DC=com
            http/aws-server-01.comp.com
    Updated object
    
    C:\Windows\system32>setspn -l SVC_App
    Registered ServicePrincipalNames for CN=SVC_App,OU=Service Accounts,OU=Users,OU=Production,DC=comp,DC=com:
            http/aws-server-01.comp.com
            http/aws-server-01
    
    C:\Windows\system32>