Before you even contemplate the headache which is ‘Kerberos’ troubleshooting’, make sure you turn on Kerberos logging on the servers in question. Once configured and you replicate your issue, additional items are pumped into the Windows System Event log. But have patience and beware of the red-herrings!
Add the following registry key:
Registry Value: LogLevel
Value Type: REG_DWORD
Value Data: 0x1
And remember to remove this setting afterwards as it’s ultimately an unwanted burden on your server!