Users can't log in with AD account.
vastool user checkaccess <username> should denied message
user was not in users.allow file.
1 - edit the /etc/opt/quest/vas/user.allow file
add the user upn (firstname.lastname@example.org) or a group the user is a member of in the file
You can also edit the group policy if you are running VGP to make this change.
Troubleshooting commands to do when user can not login
1) as root su - <username> then do another su - <username> and enter in the password.