One of the settings on the account tab is a tick box to say that the account is sensitive and cannot be delegated. This prevents delegated authentication which occurs when a network service accepts a request from a user and assumes that user’s identity… Read the full text.
