Hi Brian.

I've checked both servers are using configured for Kerberos, both SQLTest01 and SQLTest02 return the following NTAuthenticationProviders:

I have some more information, which I hope is helpful:

1. When I checked it first thing this morning, the 'live' reporting services was running on SQLTest01.

I could logon and run reports successfully using Kerberos authentication, using all of the following:

- sqltest01

- sqltestrs.forthprots.net ('live' report server dns entry)

- iristestrs.forthprots.net ('live' report server dns entry)

- scatstestrs.forthprots.net ('live' report server dns entry)

All of these tested successfully, from my laptop logged on as my standard domain account.

I then failed-over the report server to run SQLTest02. I could run reports if I connected to sqltest02/reports, which successfully authenticated in Kerberos, but not using

- sqltestrs.forthprots.net ('live' report server dns entry)

- iristestrs.forthprots.net ('live' report server dns entry)

- scatstestrs.forthprots.net ('live' report server dns entry)

After a period of time, this then worked?? is this a ticket issue?

(I purged this tickets on the server)

2. Having switched back to sqltest01, to try and find out what is different, SQLTest 01 no longer worked in kerberos authentication?

On the sqltest01 server I purged the tickets, using kerbtray and if I logged on to sqltest01/reports, I can see a ticket pop up for MSSQLSvc/iris_test.forthports.net:1433 (my sql server data source).

Back on my laptop, when I connect to sqltest01/reports and run a report, it run the report, using kerberos authentication, but for my admin account DL.Admin(but I'm logged on as my standrard account - DL.Standard)??

I logged on to the server sqltest01 as DL.Admin, but why is it picking up when I access the report server from my laptop?

I noticed though, that a new ticket didn't appear in kerbtray. (note the report I running, runs the query from your article, to define what time of connect I have with the database)

Let me know if I not using the kerbtray right, but what I do, to test tickets are being issued, is on the machine I access report server from, I purge the tickets, and then connect.

confused and dazed - Dave