In group policy for the computer with this issue, disable the option: ‘Microsoft network client: Digitally sign communications (always)’. Follow these steps:
Globally: On a Domain Controller (instructions from a Server 2008 Environment):
- Go to Start > Run and type
gpmc.msc
- select Default Domain Policy, right click and select Edit…
- Navigate to Computer Configuration > Windows Settings > Security Settings > Local Policies > Security Options
- Double-Click Microsoft network client: Digitally sign communications (always) and select Disabled.
- Open a command prompt and type
gpupdate /force
. You may need to repeat this step on any affected target machines, or reboot the devices.
Locally: On a target device with connection issues:
- Go to Start > Run and type
gpmc.msc
- Navigate to Computer Configuration > Windows Settings > Security Settings > Local Policies > Security Options.
- Double-Click Microsoft network client: Digitally sign communications (always) and select Disabled.
- Open a command prompt and type
gpupdate /force
.