You might want to check the settings on the new server under your domain controllers policy and default domain policy for the digitally encrypt and digitally sign settings under
windows settings, security settings, security options to make sure they are the same as the old server as these can sometimes get changed when loading service packs and can then cause problems with older os's