Windows 7 Client must authenticate to use mapped drives

I have an SBS 2003 domain with a Windows 2003 domain controller and an SBS 2011E controller with the FSMO roles.  The Clients are all Windows 7.

One Windows 7 clients gets the following message when trying to access mapped drives:
The system detected a possible attempt to compromise security.  Please ensure that you can connect to the server that authenticated you.  This computer also logs the following event ids:
1053 The processing of Group Policy failed.  Windows could not resolve the user name.
40960 The security system detected an authentication error for the server cifs/xxxxxx.  The failure code from authentication protocol Kerberos was (0x80080341).
Also, this user cannot ping computer names, only IP addresses.

The Windows server 2003 logs the following error:

27: While processing a TGS request for the target server krbtgt/CGA.LOCAL, the account Cxxxxxx did not have a suitable key for generating a Kerberos ticket (the missing key has an ID of 8). The requested etypes were 18.  The accounts available etypes were 23  -133  -128  3  1.

I am having no luck connecting the dots using the web.
Please help if you know what is going on.
susie2229Asked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Nick RhodeIT DirectorCommented:
Does this user have the same issue on another PC?  If not the trust relationship between the system and the server is probably broken so a removal from the domain and rejoin might resolve the issue.
0
susie2229Author Commented:
No, I can log on as him to my computer without incidence.  Everything is fine.
0
Nick RhodeIT DirectorCommented:
Try removing the system from the domain and rejoining.  This means his account is fine so its between the PC and domain communication.  Possible chance of malware on the PC?
0
Fundamentals of JavaScript

Learn the fundamentals of the popular programming language JavaScript so that you can explore the realm of web development.

susie2229Author Commented:
I did remove it from the domain, and rejoin it and then added back in the SBS connector.  Same problem.
0
Nick RhodeIT DirectorCommented:
For some strange reason is the computer object in AD disabled?
0
susie2229Author Commented:
No
0
Nick RhodeIT DirectorCommented:
Is this PC being affected by group policy or have some type of malware messing with it?  Perhaps something got messed up with the host file on the system?

You can check the host file by browsing to the following location:  

C:\Windows\System32\drivers\etc

copy the host file to notepad or wordpad and check it out
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
susie2229Author Commented:
I will try that
0
susie2229Author Commented:
I ended up reformatting the hard drive but thank you for all your great suggestions
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
SBS

From novice to tech pro — start learning today.