The Security System detected an authentication error for the server cifs/SERVER.domain.local. The failure code from authentication protocol Kerberos was "The specified user does not exist.
This event often accompanies a 672 security event.
We kept getting these from a terminal server, when the user that was logged on to (disconnected) the terminal server had been renamed or had changed the password.
Resetting the session should resolve this.