2.3.9.5 Ensure 'Microsoft network server: Server SPN target name validation level' is set to 'Accept if provided by client' or higher
Solution
Make sure 'Microsoft network server: Server SPN target name validation level' is set to 'Accept if provided by client' on the service principal name (SPN) that is provided by the client computer when it establishes a session using the server message block (SMB) protocol.