The server Extended Protection level is set to Allowed or Required, and the client did not provide a Service Principal Name ...

The server Extended Protection level is set to Allowed or Required, and the client did not provide a Service Principal Name (SPN). To connect, this client must support Extended Protection. You might have to install an operating system service pack that allows for Service Binding and Channel Binding.