Using modern Windows Active Directory with Kerberos tickets, SSO2 may be required. What version of Windows Active Directory and what is your Windows domain functional level?
Check the following resources for more details:
Single Sign-On with Microsoft Kerberos SSP - Network and Transport Layer Security - SAP Library
http://scn.sap.com/community/netweaver-sso
Hope this helps,
-Nathan