Change Auditor Client console access denied despite the user AD group membership
説明
Change Auditor Client console access denied despite the user AD group membership.
原因
Change Auditor Client console may throw an error 'access denied' despite the user account under which it is being opened has the Change Auditor Administrators AD security group membership.
対策
This might happen due to DNS pointer records aren't correctly translating short NetBIOS naming convention into FQDN and the other way around. This has been observed on foreign forest consoles with trust. Essentially, the fix would be to fix the DNS which is a third-party manual effort. Or just use FQDN\USER instead of DOMAIN\USER when entering the AD account credentials each time the CA console launches.