Trying to get rid of Kerberos UNconstrained delegation

Trying to get rid of Kerberos UNconstrained delegation

We have some computer accounts that have Kerberos UNconstrained delegation configured and want to switch to Kerberos constrained delegation. However to do this we need to know which services these accounts are requesting a ticket for in the backend (ex. MSSQLSvc/SQLSRV01:8080).

What report can show which service SPN an account is requesting a ticket for?
                New to ADManager Plus?

                  New to ADSelfService Plus?