Jooel asked if there were any eventlogs generated, check the workstation and the %logonserver%, did you get a chance to do that ?

-Shawn