Error 3146 and security/authentication

7.0 SP2, NT 4 SP 5A. I have ONE user of a VB application that can't get to the server now that we migrated over to 7.0 authentication.

I added his NT id to a local NT Group on the SQL Server. Others in that group whose NT ids are on the same domain as the SQL Server aren't having the problem. He's in a different domain than everyone else. His NT is on only one domain (checked this twice!). He can ping the SQL Server. It takes him 7 hops to get to the server whereas everyone else it takes 2.

He's using Windows 98 (using the same login and password for his pc as his NT id)whereas everyone else is using Windows NT.

The domain he is on is trusted to an "external" domain and the "external" domain is trusted to the domain SQL Server runs on.

Nothing shows up in the NT event logs or the SQL Server logs.

Any ideas on how I can analyze where the problem is? I can't find anything in Technet or in the archives here at Swynk. I'm stuck :{