When using a local system account to run the PolicyServer, and using the IP address FQDN of a specific domain controller, FDE clients may improperly receive invalid user ID or password message. This may happen when the clients are online with the PolicyServer at DAOS.
The PolicyServer diagnostic monitor displays this line during the authentication subsequent to an ppDomain[40]::ActiveDirectoryCommandProcessor.Authenticate call:
MobileArmor.DirectoryServices.ActiveDirectory[40]::LdapServer.GetResponse : Failed with exception.[Exception: System.DirectoryServices.Protocols.DirectoryOperationException: An operation error occurred.at System.DirectoryServices.Protocols.LdapConnection.ConstructResponse(Int32 messageId, LdapOperation operation, ResultAll resultType, TimeSpan requestTimeOut, Boolean exceptionOnTimeOut) at System.DirectoryServices.Protocols.LdapConnection.SendRequest(DirectoryRequest request, TimeSpan requestTimeout) at System.DirectoryServices.Protocols.LdapConnection.SendRequest(DirectoryRequest request)at MobileArmor.DirectoryServices.LdapServer.GetResponse(DirectoryRequest request)]