TestimoX

API Reference

Class

ConstrainedDelegationInventoryService

Edit on GitHub
Namespace ADPlayground.Delegation
Assembly ADPlayground
Source ADPlayground/Delegation/ConstrainedDelegationInventoryService.cs:72
Modifiers static

Builds an inventory of accounts configured for Kerberos Constrained Delegation (KCD) via msDS-AllowedToDelegateTo. Also validates target SPNs exist.

Inheritance

  • Object
  • ConstrainedDelegationInventoryService

Methods

public static View Evaluate(String domainName, String allowedServiceClassesCsv = null) #
ADPlayground/Delegation/ConstrainedDelegationInventoryService.cs:72
Returns: View

Enumerates Kerberos Constrained Delegation (KCD) accounts and validates targets, optionally allowing specific service classes.

Parameters

domainName System.String requiredposition: 0
DNS domain name.
allowedServiceClassesCsv System.String = null optionalposition: 1
Optional comma‑separated list of service classes considered allowed.

Returns

Inventory view with per‑account target lists and validation markers.