You need to ensure that you can view the Delegation tab from the properties of the User1 account

Your network contains an Active Directory domain named contoso.com.
You create a user account named User1. The properties of User1 are shown in the exhibit.
(Click the Exhibit button.)

You plan to use the User1 account as a service account. The service will forward
authentication requests to other servers.
You need to ensure that you can view the Delegation tab from the properties of the User1
account.
What should you do first?

A.
Configure the Name Mappings of User1.

B.
Modify the user principal name (UPN) of User1.

C.
Configure a Service Principal Name (SPN) for User1.

D.
Modify the Security settings of User1.

Explanation:
If you cannot see the Delegation tab, do one or both of the following:
Register a Service Principal Name (SPN) for the user account with the Setspn utility in the
support tools on your CD. Delegation is only intended to be used by service accounts, which
should have registered SPNs, as opposed to a regular user account which typically does not
have SPNs.
Raise the functional level of your domain to Windows Server 2003. For more information,
see Related Topics.

http: //blogs. msdn. com/b/mattlind/archive/2010/01/14/delegation-tab-in-aduc-not-availableuntil-a-spn-is-set. aspx
http: //blogs. msdn. com/b/mattlind/archive/2010/01/14/delegation-tab-in-aduc-not-availableuntil-a-spn-is-set. aspx
http: //technet. microsoft. com/en-us/library/cc739474(v=ws. 10). aspx
http: //blogs. msdn. com/b/mattlind/archive/2010/01/14/delegation-tab-in-aduc-not-availableuntil-a-spn-is-set. aspx