Wiki : ./Security/Windows/AD/unconstrained_delegation.md

Review

Get a list of machines that have "Trust this computer for delegation to any Service" set.

Get-ADComputer -Filter {TrustedForDelegation -eq $true} -prop trustedfordelegation,serviceprincipalname,description