Windows time service started to misbehave and changed the date and time over three months back on a regular basics. Because of this Kerberos-protocol stopped working and AD could not give any new Kerberos tickets to clients. New clients could not log on to the file services and new logins to computers failed. Old tickets worked fine until those expired. Problem was permanently fixed 20.11.2014 at 11:06.