Kerberos Delegation and Troubleshooting
When things go wrong with Active Directory’s (AD’s) Kerberos implementation, troubleshooting can be a daunting task. Ninety-nine percent of the time, everything just works—so opportunities to practice troubleshooting are limited. When you do need to solve a problem, it’s important to have a good technical understanding of the protocol. One of Kerberos’s most complicated configurable components is the concept of delegation.
[RESOURCE AUTHOR]

Brian Desmond
Brian is a principal at Ravenswood Technology Group where he leads a team of professionals focused on delivering best-in-breed consulting services for the Microsoft security and identity management ecosystem.
Brian has been recognized annually as a Microsoft MVP since 2003 and is the author of the fourth and fifth editions of Active Directory from O'Reilly.