-
Title
LDAP Error: "0x31. Invalid Credentials" is generated trying to open QMM console under the delegated account -
Description
User, which is Domain Admin and member of local Administrators group, was added into QMM Project, Delegate. When logging in as this user and attempting to open QMM console, the error is generated: LDAP error 0x31. Invalid Credentials (8009030C: LdapErr: DSID-0C0906B5, comment: AcceptSecurityContext error, data 52f, v4563)
However RUM console can be opened with no issues under the same account. Also ADSIedit can connect to ADLDS database and see the content of the QMM Project
-
Cause
Not enough privileges caused by GPO. -
Resolution
The issue was found in Event Viewer, Security, logged as Audit Failure. Failure in svchost.exe, <account name>, privilege: SeTcbPrivilege
To resolve the issue, please either modify domain GPO or local GPO and add local Administrators group into “Act as part of the operating system”
It's located in: gpedit.msc -> Windows Settings -> Security Settings -> User Rights Assignments -> Act as part of the operating system
Perform gpupdate /force, logoff and then log back on