Identity Awareness - We are detecting error "Make sure the account exists in the AD"

[Carlos_Jara]

Identity Awareness - We are detecting error "Make sure the account exists in the AD"

[Jerry · Accepted solution]

1. is this the only one account auth. failing?

2. do you user RADIUS to AD or LDAP OPSEC with proper CN structure?

3. did you verify the user (franky it may not be mapped into the respective groups?)

more details please so we could narrow what's wrong (potentially)

[Carlos_Jara]

Finally we have found a full space alarm in one of active directory servers .....

This is the root problem !!!!!

[Carlos_Jara]

This error appear only with new users (just created today).

[Jerry]

simple: compare user group memberships. find the working one and see the none-working one spotting a difference

if this isn't group memberships and users are within the same CN (OU) then there must be something else ...

[_Val_]

Are you using Kerberos agents?

Take a look here: "Group membership of the required account (user or machine) could not be retrieved from the AD" log ... 

[Alessandro_Marr]

Hello, I suggest you check your Active Directory replication. The user could have be created at domain controller "A", but AD Query could been checking domain controller "B"