For general Active Directory troubleshooting, Thunderstone has found
the DelegConfig
tool to be handy. It's an ASP.NET application
used to help troubleshoot and configure IIS and Active Directory to
allow Kerberos and delegating Active Directory credentials. At the
time of this writing, it is available at:
http://www.iis.net/downloads/default.aspx?tabid=34&g=6&i=1434
Thunderstone did not create DelegConfig, and does not make any guarantees to its accuracy or availability.