Windows Kerberos Authentication

Hello all you windows gurus...

Heres a interesting one for ya: Kerberos

let me set the scene:

my companys new infrastructure.. 2k3 (r2) domains etc...

we have a single network drive.. mapped to S:

this is a DFS based network resource, which also uses ABE to control access to the various department folders.. DFS is quite reliant on Kerberos to function.

the problem we are having is with laptop users...

because they are usually remote, they logon with cached NTLM credentials and then either connect to wireless+VPN or dialup.. Now they are on our network, what is the best way to get their machine to gain Kerberos authentication to enable access to the shared drive?

So far the only answer ive come up with is to get them to force offline files to syncronise. which will then pickup a Kerberos ticket. Problem here is it could potentially take a long time for a user to sync files, so am wondering if theres a better way to get a kerberos ticket? maybe a batch file or something?

Thanks in advance

CG:Windows retard