Ok.. Rookie mistake.. Answer is as follows:
--Gpedit.msc
---computer configuration
----windows settings
-----security settings
------local policies
-------security options
--------microsoft network client: digitally sign communications always needs to be set to disabled.
All fixed now..