This system operated an SMB share so Kerberos is probably what locked us out.