Windows login to 10.4 through AD

I feel like I have seen so many similar posts, tried so many different solutions, but I still cannot get this to work reliably. Samba log always says: NT_STATUS_WRONG_PASSWORD User "jnaubur" failed to authenticate with "dsAuthMethodStandard:dsAuthSMBNTKey" (-14090) :( check_ntlm_password: Authentication for user [jnaubur] -> [jnaubur] FAILED with error NT_STATUS_WRONG_PASSWORD I have tried so many things, read so many posts, did so many searches that I don't even know where to start anymore. Then magically it starts working (used to be stopping and starting the services, but now even that doesn't work) for a few minutes. About a month ago it worked for about 4 weeks straight. Here is the last successful log: User "jnaubur" authenticated successfully with "dsAuthMethodStandard:dsAuthSMBNTKey" :) check_ntlm_password: authentication for user [jnaubur] -> [jnaubur] -> [jnaubur] succeeded nauburj (172.17.8.52) connect to service IS initially as user jnaubur (uid=1831784525, gid=848649075) (pid 1824) check_ntlm_password: authentication for user [jnaubur] -> [jnaubur] -> [AD\jnaubur] succeeded nauburj (172.17.8.52) connect to service IS initially as user AD\jnaubur (uid=1831784525, gid=848649075) (pid 1914) check_ntlm_password: authentication for user [jnaubur] -> [jnaubur] -> [AD\jnaubur] succeeded Then suddenly: poof. No more luck - only worked for like 5 minutes and not again since. domain_client_validate: unable to validate password for user jnaubur in domain AD to Domain controller \\servername. Error was NT_STATUS_ACCESS_DENIED. User "jnaubur" failed to authenticate with "dsAuthMethodStandard:dsAuthSMBNTKey" (-14090) :( check_ntlm_password: Authentication for user [jnaubur] -> [jnaubur] FAILED with error NT_STATUS_WRONG_PASSWORD I am really pulling out my hair here. Setup: Windows 2003 Active directory 3 OSX 10.4 servers, 1 metadata, 2 fileserving - I am trying to log into one of the fileservers. 250 PC users 150 Mac users xSan DNS seems to work fine played with SMB.conf a bit (i think the last time it worked was immediately after adding an entry in the line: auth methods = guest [added: ntdomain] opendirectory. The server that I am working on is only in very low production so i can play around a fair bit. Our old and stilll in use system is Netware, and this OSX server was supposed to replace it in a few months - this is a huge block for that to happen. Please help. Jason Naubur