Forum Moderators: travelin cat
Go to start -> admin tools -> domain controller security policy
Open security options under local policies
Turn the following two options to disabled:
Microsoft network client: digitally sign communications (always)
Microsoft network server: digitally sign communications (always)
You'll have to reset the server afterwards for the settings to take effect. I think there is a way to just refresh the security settings, but I forgot that step.