It is a requirement that when Credential Guard is enabled, you cannot use "Unconstrained delegation". Below is the link for the requirements when using Credential Guard.
https://docs.microsoft.com/en-us/windows/access-protection/credential-guard/credential-guard-requirements
Applications will break if they require:+
- Kerberos DES encryption support
- Kerberos unconstrained delegation
- Extracting the Kerberos TGT
- NTLMv1