The equipment account needs to be used to decrypt the Kerberos token/ticket that's obtained from Lively Directory and forwarded via the client on the server to authenticate the consumer. Sign-up the Provider Principal Title (SPN) for the host, not the consumer on the app. The idea of the above mentioned https://pay-someone-to-take-asp-n58378.tblogz.com/a-review-of-asp-net-project-help-42723374