Getting Interesting ACLs

Find-InterestingDomainAcl -ResolveGUIDs | ?{$_.IdentityReferenceName -match "StudentUsers"}

Now Let’s Set SPN on support36user

Set-DomainObject -Identity support36user -Set @{serviceprincipalname="us/myspn36"}