#unconstrained-delegation

Remove unconstrained delegation from AD servers

Find every non-DC account trusted for unconstrained delegation, map what depends on it, and migrate to constrained delegation or RBCD without outages.