Queries Active Directory over LDAP for enabled user and computer objects with unconstrained, constrained (with or without protocol transition), or resource-based constrained Kerberos delegation settings. It reports delegation relationships and target SPN checks.
Python
RESTRICTED_ACCESS_BLUR_MARKER