The equipment account should be utilized to decrypt the Kerberos token/ticket that is attained from Active Directory and forwarded with the customer for the server to authenticate the user. Register the Company Principal Name (SPN) with the host, not the user on the app. A private ASP.Web tutor can help https://paysameonetodoaspnetassig26255.blog5star.com/28910451/asp-net-homework-help-things-to-know-before-you-buy