OK, looks like MS had a very good workaround (if you're not ultra-high security) in kb331519 but took it offline and said it was antiquated to kb810907. I got the work-around from 331519 from Google's cache, tried it, and it worked beautifully for me. Here's what it says:
CAUSE - These problems occur because of an incompatibility in Server Message Block (SMB) signing between Microsoft Windows 2000 and Windows XP SP1. By default, SMB signing is turned on on domain controllers only when possible. By default, you only experience this problem when you copy files to and from a domain controller. However, if you apply policy settings or set registry keys to servers, you may experience problems when you copy files to and from a server.
WORKAROUND - To work around this problem, use Group Policy settings to turn off SMB signing. To do so, set the Default Domain Controller policy settings to Disabled:
1. Click Start, point to Programs, point to Administrative Tools, and then click Active Directory Users and Computers.
2. Right-click the Domain Controllers organizational unit, and then click Properties.
3. Click the Group Policies tab.
Click Default Domain Controllers Policy, and then click Edit.
5. Locate
Computer Configuration\Windows Settings\Security Settings\Local Policies\Security Options
6. If any of the following policy settings are set to Enabled, double click the setting, click to select the Define this policy setting check box, click Disabled, and then click OK.
NOTE: By default, only one setting is set to Enabled.
Digitally sign client communication (always)
Digitally sign client communication (when possible)
Digitally sign server communication (always)
Digitally sign server communication (when possible)
7. Close Group Policy editor, click OK, and then quit Active Directory Users and Computers.
By default, Group Policy settings are refreshed on domain controllers every five minutes. To force the policy settings to be refreshed on Windows 2000 immediately, run the following command:
secedit /refreshpolicy machine_policy /enforce
8. After the settings are applied, restart Windows 2000.