Execute the ktpass.exe file in the command prompt to associate a Service Principal Name (SPN) with the user entry, for example:

Example Syntax

ktpass.exe /princ host/<LoadMasterSPN>@<Domain> /ptype KRB5_NT_PRINCIPAL /mapuser <Domain>\<TrustedUserLogonName> /mapop set /setupn /crypto all

Example Command

ktpass.exe /princ host/lm60.esptest.local@ESPTEST.local /ptype KRB5_NT_PRINCIPAL /mapuser ESPTEST\lm60.esptest.local /mapop set /setupn /crypto all

Note: The ktpass.exe file is a Microsoft command-line utility and is present on any Windows Server installation.

When this has been completed, the user properties window will have the Delegation tab.