TGS is a KDC component that issues a service ticket when a principal requests connection to a Kerberos service.
You must first have a Ticket Granting Ticket (TGT) for the (Active Directory) domain before you can be issued a service ticket in that Active Directory domain.