Here's another possibility:
http://support.microsoft.com/kb/310049/en-us
If this is a Windows 2008 domain, there are about a zillion new Group Policy Objects,
some of which may have gotten bollixed up and caused the problem. Do you have a
test or model account on the domain that the user can try from the same computer?