Group policy was the problem in our case, try putting your win server in an Ou that inherits no group policy, we were having problems with "audit object access"