I believe most of this was to do with a time difference between the client and the server. Future tests showed that my software worked with a Kerberos token for 'n' amount of time, and then I would start getting errors. I'm not talking about, constantly working. I mean, closing the application and starting it again, I would still get bizarre Kerberos token errors. I've therefore stopped using it. It was a good at the start, but too unpredictable. "If you're too careful, your whole life can become a f---in' grind." - Mike McD (Rounders)