Search Appliance SBE
For general Active Directory troubleshooting, Thunderstone has found
the DelegConfig tool to be handy. It's an ASP.NET application
used to help troubleshoot and configure IIS and Active Directory to
allow Kerberos and delegating Active Directory credentials. At the
time of this writing, it is available at:
https://www.iis.net/downloads/community/2009/06/delegconfig-v2-beta-delegation-kerberos-configuration-tool
Thunderstone did not create DelegConfig, and does not make any guarantees to its accuracy or availability. It's just something we've found handy.