The Microsoft Kerberos documentation seems either to have moved or
to have been renamed. The closest thing I could find (which may be
the same thing--I'm not sure) is:
Utilizing the Windows 2000 Authorization Data in Kerberos Tickets
for Access Control to Resources