When configuring MOSS for Kerberos, in most cases you do not need to modify the Metabase using the standard adsutil.vbs script commands.  You simply need to enable Kerberos authentication in:

Central Administration > Application Management > Authentication Providers 

Select the appropriate MOSS application and select the Default zone.

Make sure Anoymous access is UNchecked.

Under Windows Integrated Authentcation, select Negotiate (Kerberos) button.

Click Save and do an iisreset via the command prompt.

Obviously, you will need to set SPNs for the AppPool Identity service account if it is not Network Service.

- Sam
 

---

--------------------------------------------------------------------------------
The statements and opinions made in my postings are my own, and do not reflect the opinions of SourceCode Technology Holdings, Inc. or its subsidiaries. All information is provided as is with no warranties, express or implied, and grants no rights or licenses.