dgosbell

## the following lists all the constrained delegation settings for a given AD user
## adapted from http://www.harbar.net/archive/2015/06/02/Configuring-Kerberos-Constrained-Delegation-with-Protocol-Transition-and-the-Claims.aspx
## to get ActiveDirectory Powershell module on Win 10 use the following
## https://gallery.technet.microsoft.com/Install-the-Active-fd32e541
 Param(
     [Parameter(Mandatory=$true, Position=0, HelpMessage="AD Account Name")]
     [string]$account
   )
import-module ActiveDirectory
$u = get-aduser $account -properties "msDS-AllowedToDelegateTo", ServicePrincipalNames