Enabling Unconstrained Delegation on Active Directory Domains

Where can i see the setting in domain , if i enable "unconstrained Delegation" by using below command?

netdom.exe trust fabrikam.com /domain:contoso.com /EnableTGTDelegation:Yes

Solution 1:

PowerShell module for Active Directory.

Get-ADTrust -Filter *

Direction               : BiDirectional
DisallowTransivity      : False
DistinguishedName       : CN=litware.com,CN=System,DC=contoso,DC=com
ForestTransitive        : False
IntraForest             : True
IsTreeParent            : False
IsTreeRoot              : False
Name                    : litware.com
ObjectClass             : trustedDomain
ObjectGUID              : 10233929-969d-453f-aaea-1a73f7659e74
SelectiveAuthentication : False
SIDFilteringForestAware : False
SIDFilteringQuarantined : False
Source                  : DC=contoso,DC=com
Target                  : litware.com
TGTDelegation           : True
TrustAttributes         : 32
TrustedPolicy           :
TrustingPolicy          :
TrustType               : Uplevel
UplevelOnly             : False
UsesAESKeys             : False
UsesRC4Encryption       : False