The recent PI DA does not allow PI World user access to PI DA other than windows security. Windows Security requires SPN registration which is somehow hard to execute in right manner.
I suggest to implement either function.
1: Enable PI DA to allow PI World User to access by PI Trust(like PIEngineer) so, it does not need windows security.
2: Enable windows security without SPN registration. This can avoid for IT administrator to register SPN registration.