Web App access Sys file share code Access denied error when the app is hosted on Windows 2016 server

Web App access Sys file share code got Access denied error when the app is hosted on Windows 2016 server, while it is working when it is hosted on Windows 2008 R2 or Windows 2012 R2 server.

The web app is using Windows Integrated Authentication only and it is Kerberos Authentication accessing the remote Sys File share. In Windows 2016 server environment, it needs additional steps below to make Kerberos Authentication work for remote Sys File Share.

1. On DC, locate the web server machine account.

2. Under that machine account, Select "Trust this computer for deletgation to specified services only", and under that , select "use any authentication protocol"

3. Under that, added CIFS service as specific service for Kerberos delegation.