The combo has been working well for us. ADPassmon itself was good, but we'd run into users being unable to change their passwords though it, after their tickets expired—and ADPasmon wouldn't give an error, just an unsuccessful password change. Kerbminder seems to have solved that for the most part—by refreshing the tickets in the background, we've drastically reduced the number of users who have to log out and back in to reset their passwords. It's also reduced the pause when authenticating in from the screensaver or login screen—no more timeouts when the computer only has expired tickets, defaulting to cached creds.
In our environment (the VPN is handing out the same DNS zones as we do on-net) we can also use ADPassmon to change passwords over the VPN, a real help for out-of-office users.
