hi,
NTLM normally is suggested for Php, Java etc, (not for Windows clients systems);
Some checks \ tests:
> try to connect to WS / Odata using server's "IP ADDRESS" instead of name
> if works you have network\firewall\dns\spn problems i think
> Switch to kerberos authentication if possible instead of NTLM