This is the first time I have experienced this problem. I created several new accounts using JRB Utilities jrbimprt. Users cannot login with the Windows client, but they can logon to NetStorage and they can access LDAP based services. If we change their password with ConsoleOne or JRB setpword, then they can logon with the client.