When there are users with an expired password their w2k workstations refuse to change the password during logon. The client says that the domain is not available. This happens with w2k w/o service pack and with w2k SP2, too.
Interesting in the log is:
NTLMSSP NTLM1 packet check failed due to invalid signature!
Created attachment 2108 [details]
Created attachment 2109 [details]
Ok, got it reproduced with smbtorture from Samba4. I'll work on it.
Created attachment 2120 [details]
The attached patch fixes it for me. Please re-open if it doesn't for you.
fixed with r18008