I wasn't in charge of setting it up completely on Windows 7, so I'm not sure about the inner workings of the entire Kerberos process. This was an issue for Windows 7, however, it was easy to fix by building a certificate trust chain. My Windows 'domain-centric' company has abruptly decided to make the switch from Windows 7 to Windows 10, and it has become my job to make their prepared image join our domain with our smart card/token based authentication system.
