Hi Wolfgang,
Thanks for your reply, that's what we have done, I did explore the option of changing the logon procedure but didn't feel it was a very clean or reliable approach.
We've used the SNCWIZARD to create the SNC PSE and set the SNC profile parameters, then removed the spnego\enabled parameter that the wizard adds. I've used the sapgenpse to create the keytab file, which is working, it just doesn't provide the same level of validation of the service account as the SPNEGO transaction does, which is a nice feature.
As I say it's not a big deal, just would be nice to configure in one place.
Many thanks,
Jason