No GPO has been modified. The registry entries refering to CredSSP etc. show up normal. The logs are clean. RDP info say NLA is supported..