Progress!

Authentication Type: Negotiate

Protocol: Kerberos

Authenticated identity: Domain\Me

Thread identity: Domain\Me

Windows identity: Domain\SQL-Service

Environment identity: SQL-Service

We're now using Kerberos at least as far as the IIS Server!

So now we just need to get to the SQL Server...