How is Kerberos used when a user signs in to an Active Directory domain?

What will be an ideal response?

When a user signs in, the client computer sends an account name and password to the key distribution center. The key distribution center responds by issuing a temporary ticket that grants the user access to the Kerberos ticket-granting service on a domain controller (or standalone server), which then grants a permanent ticket to that computer. The permanent ticket, called a service ticket, is good for the duration of a logon session (or for another period of time specified by the server administrator in the account policies) and enables the computer to access network services beginning with the Logon service.