• Be aware that if it is to a new trusted domain, if you are using SID History, some things may work until they get rid of SID History.

    Also when using Kerberos, besides SPN's, you need to make sure delegation is allowed on the accounts.

    So more is involved than just making sure you have new endpoints.