Have you been able to "corrolate" this problem happening when authenticating against one DC versus another ? I usually just log in and do a cmd "set log" to get that information.

-Shawn