I have a very limited knowledge of SPN usage and I would like to get a grasp on when exactly to use them. I think I understand that they enable Kerberos authentication in the negotiate process but let me provide a scenario that I would like clarification on.
Lets say I am installing an application on Server01 that runs a service. I have created a new service account in AD for this application because it requires rights to other resources in my domain. Is there a reason to create an SPN for this user account? Will it be a more secure configuration?
Thanks to the community in advance!
~Rob
Rob Pettigrew