Quick enumeration/recon list for bad daddy red teamers and flag-grabbers that like to use impacket or maybe even the Powershell standard AD module.

SPN-most-common.txt

a
access
account
accounts
AcronisAgent
ACS
Active
ActiveDirectory
ADAM
added
Address
Admin
Adobe
AdtServer
Advanced
AF
afpserver
AFServer
Agent
AGPM
AgpmServer
aka
alerter
all
ALM
Analysis
APIs
Application
applications
appmgmt
App-V
aradminsvc
ArcServe
attribute
Auditor
auth
authenticate
authentication
automatically
Backup
backup/data
based
BICMS
BigFix
Biztalk
BO3SSO
BOCMS
Book
BOSSO
browser
Business
CAARCserveRHAEngine
Call
Catalog
CAXOsoftEngine
Center
CESREMOTE
Change
cifs
CIFS
cisvc
Citrix
ckp_pdp
class
client
clipsrv
Cluster
CmRcService
CN=Configuration
CN=Configuration
CN=Configuration
CN=Directory
CN=Services
CN=Windows
CN=WindowsNT
code
Cognos
common
communication
components
computer
computing
Configuration
Connect
Console
Control
controlled
Controller
Controllers
creates
CUSESSIONKEYSVR
cvs
daemon
database
DB
DC
dcom
Desktop
Dfsr-12F9A27C-BF97-4787-9364-D31B6C55EB04
dhcp
different
Directory
distributed
dmserver
dns
dnscache
domain
Dynamics
DynamicsNAV
E3514235-4B06-11D1-AB04-00C04FC2DCD2
E3514235-4B06-11D1-AB04-00C04FC2DCD2-ADAM
EDVR
Engine
Enterprise
equal
eventlog
eventsystem
Exchange
exchangeAB
exchangeMDB
exchangeRFR
Exec
fax
fcsvr
File
FileRepService
Filing
FIM
FIMService
Final
firewalls
flume
Forefront
Forwarding
ftp
gateway
GC
GCs
Ghost
Global
grid
Group
hbase
hdb
hdfs
History
hive
host
alerter
http
httpfs
https
Hue
Hyper-V
ias
Identity
iem
iisadmin
Imanage
IMAP
IMAP4
ImDmsSvc
impala
informatica
InfoSphere
Infrastructure
Initiation
instance
Instance
Intelligence
Interface
internal
Internet
ipp
ISA
iSCSITarget
it
Jabber
jboss
Jboss
JournalNode
kadmin
kafka
kafka_mirror_maker
KafkaServer
Kerberos
key
Knox
krbsvr400
Kudu
ldap
LiveState
location
long
Mac
Machine
magfs
MagFS
Mail
Management
Manager
map
mapped
mapping
mapred
MapReduce
MasterServer
mcsvc
Message
Messaging
messenger
Metastore
M-Files
Microsoft
Migration
MIIS
mongod
mongos
mr2
MSClusterVirtualServer
MSCRMAsyncService
MSCRMSandboxService
msdtc
msiserver
msolapdisco3
MSOLAPSvc
MSOLAPSvc3
MSOMHSvc
MSOMSdkSvc
MSServerCluster
MSServerClusterMgmtAPI
MSSQL
MSSQL$ADOBECONNECT
MSSQL$BIZTALK
MSSQL$BUSINESSOBJECTS
MSSQL$DB01NETIQ
MSSQLSvc
Name
NAV
NAV2016
needed
netdde
netddedsm
NetIQ
netlogon
netman
Network
nfs
Nimbus
nmagent
NodeManager
Norskale
Norton
NOTE
NPPolicyEvaluator
NPRepository4
NPRepository4DEFAULT
NSPI
NT
NtFrs-88f5d2bd-b646-11d2-a6d3-00c04fc9b232
OA60
oakley
Objects
Office
Oozie
Operations
oracle
OS
OS/400
over
Packet
Partition
Password
pcast
PCNSCLNT
PIServer
Platform
plugplay
Podcast
Policy
policyagent
POP
POP3
postgres
PowerShell
Presence
Printing
Private
Procedure
Producer
-Properties
property
protectedstorage
protocol
Provisioning
pull
PVSSoap
rasman
recovery
reduce
Reference
related
Remote
remoteaccess
Replica
Replication
replicator
Repository
represents
RestrictedKrbHost
results
role
Roles
routing
rpc
rpclocator
rpcss
rsvp
samss
SAP
SAPService
SAS
scardsvr
SCCM
scesrv
schedule
scm
SCOM
SCVMM
SeapineLicenseSvr
seclogon
secshd
sentry
server
service
serviceclass
ServicePrincipalName
Services
session
share
sip
SMTP
SMTPSVC
snmp
SoftGrid
software
solr
solution
spark
SPN
SPNMapping
sPNMappings
SPNs
spooler
SQL
SQLAgent$DB01NETIQ
SSO
standard
Storm
string
STS
support
supporting
Symantec
Synchronization
System
tapinego
tapisrv
term
Terminal
TERMSERV
TERMSRV
ticket
tickets
time
TMG
Tnetd
tnetdgines
Transfer
trksvr
trkwks
typically
Unity
ups
use
value
VCSClusterVirtualServer
VDI
version
Virtual
Virtualization
VMMSvc
vmrc
VMWare
vnc
VOIP
vpn
VProRecovery
vssrvc
w3svc
web
workstations
WSMAN
WS-Management
www
X
xgrid
xmpp
XOsoft
yarn
Zeppelin
zookeeper100
106
110
111
120
140
150
2003
2005
2005
2007/2012
2012
3
365
4
52x
6x
70
71
80
85
90
93