We have had a number of users who seem to have lost communication with the domain. The user can login as they have cached credentials, but once they're in, they can't access any network drives or printers. If I log into their machine, I can map a drive, just fine. If they log into another machine, they can map a drive. It only seems to be a problem with that user on that machine.
When reviewing the logs, I can see all users get this error when the problem occurs:
Event ID: 40961
The Security System could not establish a secured connection with the server <server name>. No authentication protocol was available.
In troubleshooting the issue, I ran the MS KLIST tool on the machines and found the machines have no Kerberos tickets from the domain.
The issue is sporadic. We've solved it on a per pc basis by disjoining and readding the pc to the domain, but I need help finding root cause to fix the issue permanently.