A service ticket request by client %1 for %2 was rejected because User2User was required. The KDC responds with this error ...

A service ticket request by client %1 for %2 was rejected because User2User was required. The KDC responds with this error when a client requests a service ticket for a user principal (a security risk). The client must support User2User in order to obtain a service ticket for the requested service principal