Issue

Access Denied error when a user is attempting to log in to their PC via Windows Logon or Computer Logon.

The description in the corresponding audit log in the DualShield Admin Console shows..

LDAPException(resultCode=49 (invalid credentials), errorMessage='80090308: LdapErr: DSID-0C090434, comment: AcceptSecurityContext error, data 531, v4f7c\u0000', diagnosticMessage='80090308:

Cause

AD accounts have been restricted access to one specific workstation.

e.g...


Resolution


For DualShield v7.1.0 customers, change the authentication method in the identity source connection to GSS-API...


For DualShield 7.0 or earlier versions, add your DC to the list of computers the end-user has access to.