A few years ago [1] I wrote about how you could enable Domain Accounts to self-manage their ServicePrincipalNames. This is particularly advantageous when using Kerberos to secure services. We recently needed to set up some service accounts in Active Directory to participate in establishing a Kerberos capability for middleware integration. […]