I have found these links regarding Domain Controllers vs QNTC.
Earlier versions were more verbose on this. V7R1 shortened it down to use
kerberos.
http://publib.boulder.ibm.com/infocenter/iseries/v5r3/topic/rzahq/rzahqenableqntcaccess.htm#rzahqenableqntcaccess
http://publib.boulder.ibm.com/infocenter/iseries/v7r1m0/index.jsp?topic=%2Frzatk%2FGENUUID.htm
http://www-01.ibm.com/support/docview.wss?uid=nas1aea450153eebf8ff8625670f0072550f
What kills me is that I can access qntc on the domain controller as ROB,
but not QSECOFR. But QSECOFR can access other shares in our domain.
Rob Berendt