If your Macs are bound to your AD domain, then they will use Kerberos for authentication and (with all else being correct) will work ok.
Otherwise, you're going to have problems unless you lower those security settings.
This is covered in an article from Apple:
http://support.apple.com/kb/TS2967?locale=en_US