Thanks to Dana Martens who pointed me to a great VBScript checking the Double Hop Kerberos Authentication Issues, I translated the Script in C# and added it to CrmDiagTool.
The test is exhaustive regarding Kerberos issues.
- AD Check for Delegation properties.
- Registered SPN
- Duplicate SPN detection
The tool works all right on Windows 2000 Native and Windows 2003 Native mode AD where delegation configuration is different. It's to say it tests Delegation and Constrained Delegation settings.
Please download 3.0.5300.24000 version on the Internal Share.