In the Group Policy Editor, Select Security Settings\Local Policies\Security Options, details pane, locate and Disable:
Microsoft network server: Digitally sign communications (always).
Microsoft Network Server: Digitally Sign Communicates (If Client Agrees).
Domain member: Digitally encrypt or sign secure channel data (always).
To apply the Group Policy change immediately either, (1) restart the domain controller; (2) open a command prompt, and type:
gpupdateIf you change these setting and still have a problem, check the following settings. 1. Open the Default Domain Controllers Policy to edit the properties.
1. Under Computer Configuration, expand Windows Settings\Security Settings\Local Policies\Security Options.
2. In the details pane, locate and
Microsoft network server: Digitally sign communications (always)
Domain member: Digitally encrypt or sign secure channel data (always)
To apply the Group Policy change immediately either, (1) restart the domain controller; (2) open a command prompt, and type:
gpupdate
