I've configured Kerberos authentication for users in AD, but there is one problem: after half an hour IE7 "forgets" about Kerberos and tries to use NTLM. User have to restart IE7 to use Kerberos again. What parameter is responsible for Kerberos authentication lifetime? -- Best regards, Dmitry