For general Active Directory troubleshooting, Thunderstone has found
the DelegConfig tool to be handy. It's an ASP.NET application
used to help troubleshoot and configure IIS and Active Directory to
allow Kerberos and delegating Active Directory credentials. At the
time of this writing, it is available at:
