sekondborn said:
the user can login to the domain on the windows xp machines no problem.... so the user is already in active directory
No idea why this isn't working but the lanmanager and encryption settings have worked to allow for access many times so it must be something else blocking access.