Also, make sure that the Everyone group has been granted the "Access this
computer from the network" user right in the Default Domain Controllers
policy.
This can also happen if your client machines are running Windows XP and the
RestrictAnonymous setting is set to "2" on the domain controllers. The
registry key for this is
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa - RestrictAnonymous.
It may also be set in the default domain controllers or default domain
policy under Computer Configuration\Windows Settings\Security Settings\Local
Policies\Security Options - Additional restrictions for anonymous
connections.
NOTE: After changing the restrictanonymous setting, the server must be
rebooted for the change to take effect.
If this is the problem you are seeing, we also have a hotfix to resolve it.
--
Jimmy Harper [MSFT]
Directory Services
This posting is provided "AS IS" with no warranties, and confers no rights