After a clean install on the enterprise server I found this in the nxd.log
Info: Connection from 192.168.4.89 port 43423 accepted on Tue Jan 27 17:11:17 2015.
Info: Connection from 192.168.4.89 port 43423 process 18120 started on Tue Jan 27 17:11:17 2015.
Warning: Handler process 18120 exited with code 1, ‘Operation not permitted’.
Info: Connection from 192.168.4.89 port 43423 process 18120 closed on Tue Jan 27 17:12:08 2015.
Info: Connection from 192.168.4.89 port 43604 accepted on Tue Jan 27 17:15:14 2015.
Info: Connection from 192.168.4.89 port 43604 process 18441 started on Tue Jan 27 17:15:14 2015.
Warning: Handler process 18441 exited with code 1, ‘Operation not permitted’.
Info: Connection from 192.168.4.89 port 43604 process 18441 closed on Tue Jan 27 17:16:14 2015