When you look at the SBS Monitoring logs everyday do you see lots and lots ( I mean thousands ) of errors coming from workstations? When you look at the workstation even logs you see Kerberos and DCOM errors.
We have found that these generally relate to printer status monitors that reside on the workstation (or server). We especially see this with the HP toolbox printer software that is loaded during the complete printer driver installation of HP Printers.
Do you need these printer monitor programs. No we believe not so if you don't need them then they should be removed to prevent all the Kerberos errors. You can uninstall and reinstall the printer drivers but take a look in :
and for HP printers remove the following startup entries :
StatusClient 2.6 REG_SZ
c:\program files\Hewlett-Packard\toolbox\statusclient\statusclient.exe /auto
TomcatStartup 2.5 REG_SZ
and then reboot the system. The printer toolbox will no longer be loaded and the security errors on the SBS system should now be gone. The actual monitor programs maybe different for different printer suppliers.