The .NET API we use to get currently logged on user information requires read access on the default "Computers" and "Users" containers in AD.
.NET Function used:
https://docs.microsoft.com/en-us/dotnet/api/system.directoryservices.accountmanagement.userprincipal.current?view=dotnet-plat-ext-6.0
Run these commands in PowerShell, as the user attempting to log in, to verify this is the issue:
> Add-Type -AssemblyName System.DirectoryServices.AccountManagement
> [System.DirectoryServices.AccountManagement.UserPrincipal]::Current
This should return the exact same error text as you see when attempting to log in to GPOADmin.
