[THIN] restricted RDP connections

I'm baffled by this one

two W2K8 TSE servers, both have local policies set to allow 2 connections
and also *not* require NLA. One day both servers start prompting for
credentials before establishing the connection and I can only make 1
connection to a server; I don't even get the preconnect auth prompt just an
immediate "can't connect" error.

However, run a RSOP on both boxes and NLA is still disabled and connections
are still limited to 2. Searched the registry for UserAuthentication and
every value is set to 0, content of LSA\Security Packages is kerberos msv1_0
schannel wdigest tspkg


Ideas?

Other related posts: