---
id: 5967
title: "Unconstrained Delegation in Active Directory"
source_domain: semperis.com
source_url: "https://www.semperis.com/blog/active-directory-unconstrained-delegation-security-risks/"
published_at: "2022-01-07T18:38:03Z"
tags: ["active-directory", "kerberos", "hardening", "misconfigurations", "unconstrained-delegation"]
phying_url: "https://phying.com/item/5967"
lang: en
---

# Unconstrained Delegation in Active Directory

## Summary

Why unconstrained delegation is among AD's worst security gaps: it lets a computer store users' Kerberos tickets and impersonate them, making it a prime target; removing the setting eliminates a weak link in trusted authentication chains.

## Intelligence Metadata

- **Sources:** semperis.com
- **Published:** 2022-01-07T18:38:03Z
- **Original:** https://www.semperis.com/blog/active-directory-unconstrained-delegation-security-risks/
- **Phying News:** https://phying.com/item/5967