The agent is part of the domain (it is a clustered instance).
The agent gains access via the domain group SQL_Agent.
Note that my account (which works fine) is a member of the DBA domain group (almost identical to the above group).
I have tried putting the agent into the DBA group with no success.