Boys and girls this one gets sticky!
#1. If you doing farms you need to make sure to skip the MinEncrytion reg setting in LSA.
#2. If you do set it make sure to hit every single server in the farm and every server that has a published application on it becasue they all need to have the same setting. No Basic vs. 40 bit vs 128 bit. You will have one huge headache.