If you run C2CONFIG from the Resource Kit on your DC (Domain Controller), W95 clients may receive:

       User not allowed to log on at this computer.

-or-

       You are not allowed to log on from this workstation.

The NT Security log contains event ID 533.

To resolve the problem, edit the DC's registry and delete:

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\CrashOnAuditFail