Configurations in AD

  1. Create a service account from the user group in the AD machine with the following permissions as shown:
  2. Set the delegations in the AD machine using the following commands: 
    1. Get-ADUser -Identity <service_account> | Set-ADAccountControl -TrustedToAuthForDelegation $True
    2. Set-ADUser -Identity <service_account> -Add @{'msDS-AllowedToDelegateTo'=@('HOST/<CEP_machine_FQDN>','RPCSS/<CEP_machine_FQDN>')}