Kinda sounds like smoke to me - idk. But when I get weird Kixtart domain-related errors, I always check the eventlogs on both the "workstation" and on the dc's. Lots of people forget to do this. Sometimes the answer is right there.

-Shawn