Issue
If Dirsync/ADPro is installed with Windows Authentication instead of SQL authentication the following behavior is seen:
Within the SQL Error log, we are seeing permanently Denied logons for The NT Authority\Anonymous Logon which indicates the website not use the Integrated windows Logon, it use instead the anonymous logon.
So at some point in time this has been changed in our connection Method as with older versions this works as expected and now the function is gone and we need to use SQL Authentication to get this working instead.
Solution
Ensure SQL Authentication is leveraged if the intent is to access the Dirsync/AD Pro console remotely.
It is recommended to select “SQL Server Authentication” during the Directory Sync Pro/Active
Directory Pro server console installation if multiple people will be accessing the Directory Sync
Pro/Active Directory Pro web user interfaces. Otherwise, if “Windows Authentication” is chosen
during installation, create a security group in AD and assign DB Owner rights to the Directory Sync Pro
SQL databases and add all the users that need access to the console as members.
The installer creates a local group on the Directory Sync Pro server named BTDirSyncPro and will add the currently logged in user to the group. Other users or a Domain group can be added to provide access to other users.
