How to create constrained or unconstrained Kerberos and know whether the back end is constrained or unconstrained Kerberos?

Hello Community

    I am considering Kerberos Authenication but there seems to be
2 kinds of Kerberos: constrained and unconstrained.

    Since when creating Kerberos you are only offered things like "Negotiate\Kerberos"
Or "Negotiate" or "Setspn" the question is how do you create a constrained
or unconstrained Kerberos and since the back end has to match how do you
do you know whether the back end uses constrained or unconstrained Kerberos?

    Thank you
    Shabeaut