New CrmDiagTool 3.5300.24000 (Added Full Kerberos/Delegation Tests)

  • Article

Hi guys,

Thanks to Dana Martens who pointed me to a great VBScript checking the Double Hop Kerberos Authentication Issues, I translated the Script in C# and added it to CrmDiagTool.

The test is exhaustive regarding Kerberos issues.
Test includes

- AD Check for Delegation properties.
- Registered SPN
- Duplicate SPN detection

The tool works all right on Windows 2000 Native and Windows 2003 Native mode AD where delegation configuration is different. It's to say it tests Delegation and Constrained Delegation settings.

Please download 3.0.5300.24000 version on the Internal Share.

Cheers

Benjamin