Configuring Kerberos is an advanced task and should only be performed by an appropriately trained professional. The steps and configurations given in this help file are to be used as a guide - your system may require additional configuration due to different hardware and software compatibilities.

Occasionally the existing Kerberos tickets are used when trying to delegate and thus cause delegation to fail. You can force renewal of the Kerberos tickets by using a tool called KerbTray which is part of the Windows Server 2003 Resource Kit.

To use KerbTray:

1. On the K2 server, open KerbTray (double-click on kerbtray.exe)
2. The application will open and an icon will display in the system tray:
   
   
   
3. Right-click on the icon and select Purge Tickets
4. Repeat on the second machine (the K2 Workspace server or Reporting Services server, whichever layer you are troubleshooting)
5. Close any open Internet Explorer instances and try accessing the web site again

In your environment, you will need to ensure that the SPNs are replicated across all the domain controllers in your domain. Default replication interval for site links is set to 180 minutes (http://technet2.microsoft.com/windowsserver/en/library/c238f32b-4400-4a0c-b4fb-7b0febecfc731033.mspx?mfr=true). You can either force the replication using a tool such as KerbTray or change the site link replication interval via the Active Directory Sites and Services console.