Zurück
-
Titel
Group Policy occasionally adds the AD account name using displayName instead of sAMAccountName -
Beschreibung
User Override, users-allow, and users-deny settings in Group Policy occasionally add the account name using displayName instead of sAMAccountName leading to issue with resolution of the override and access control on the Unix servers. -
Ursache
Product defect 493011 (for user-overide GPO)
Product defect 782754 (for users-allow and users-deny GPOs)
-
Lösung
WORKAROUND
Remove the user override and re-add.
For users-allow and users-deny if an account is not working correctly it can be added to a group and that group can be added to the users-allow or users-deny files.
STATUS
Defect 493011 fixed in version 4.1.0.22377 and above.
Defect 782754 fixed in QAS 4.1.7 and up.
The latest maintenance fix for 4.1 is available at https://support.oneidentity.com/authentication-services/kb/228689
-
Änderungsanforderung
493011, 782754 -
Weitere Informationen
Change log: 4.1.0.22377 Bug 493011 * vgp: Windows, when accepting user names for overrides, if resolution fails, don't make a possibly incorrect NT4 string.