Community technical support mailing list was retired 2010 and replaced with a professional technical support team. For assistance please contact: Pre-sales Technical support via email to sales@march-hare.com.
Glen Starrett wrote: > CVSNT is trying to get a login token from the DC as the aliased user, > but without the correct password maybe? No, it's just a query for the user SID, not any kind of authentication. For this to fail it suggests the user doesn't actually exist on the PDC for that domain for some reason (the error coming back is 'user not found' not permissions or anything like that). I'm not sure why and it may be that it's getting a different PDC/BDC for the domain to the one that SSPI is using, and the user doesn't exist on that one. I'm adding some more trace functionality to the code so I can find this kind of thing out... funny how these things happen in groups (two authentication problems at once, albeit different, after the code hasn't needed touching for years). Tony