None of the users are getting authenticated
Doing the command: /opt/quest/bin/vastool user checkaccess testuser
Access policy denial. User is not authorized to access this host.
DENIED (access denied) [user=testuser] [service=login]
Access Rule = [Deny Domain - example.com (users.deny)]
users.deny file was being pushed out deny access to all the users of the domain
Please delete /etc/opt/quest/vas/users.deny file. Then do a vastool flush. the users.deny file is not needed as there is a users.allow file in place.
If you are using a group policy to push out this file you will need to edit the policy:
Microsoft Group Policy manager or Group Policy Object Editor and go to Settings | Quest Authentication Services | Access Control | node. Double-click users.deny Configuration and change it to no.