Consider the following scenario:

• You have an Authorization Manager store in an Active Directory domain environment.
• You add a user to a role in Authorization Manager.
• You log on to and then you log off from the domain on a Windows Vista-based or Windows Server 2008-based client computer by using the user account to that you added the role.
• The administrator deletes the user from the role in the Authorization Manager.

In this scenario, the user still can access the role.

Environment
Novell GroupWise 7 Support Pack 3
Windows Vista
Situation

Symptoms:
When trying to install GroupWise 7.0.3 Client on Windows Vista using Active Directory Software Deployment. The installation hangs when it reaches the stage of windows messaging.

When you try to join a Windows Vista-based client computer to a top level domain (TLD) that has a purely numeric suffix, the Windows Vista-based client computer cannot join the domain. Additionally, you receive the following error message:

Computer Name/Domain Changes
An Active Directory Domain Controller for the domain could not be contacted. Ensure that the domain name is typed correctly. If the name is correct, click Details for troubleshooting information.

Note: An example of a purely numeric suffix is “contoso.2003.”

When you click Details, you receive the following error message:

An error occurred when DNS was queried for the service location (SRV) resource record used to locate an Active Directory Domain Controller of the domain domain name.

The error was: “The filename, directory name, or volume label syntax is incorrect.”

(error code 0×0000007B ERROR_INVALID_NAME)

The query was for the SRV record for _ldap._tcp.dc._msdcs.domain name.com

If you try to join the domain by using the NetBIOS name of the domain, you are prompted for domain credentials. In this case, the client computer still cannot join the domain. Additionally, you receive the following error message:

The following error occurred attempting to join the domain NetBIOS name of the domain Logon failure: unknown username or bad password.

Consider the following scenario.

• On a Windows Vista-based computer, you log on to an Active Directory domain in a forest by using a user account in this domain.
• The Windows Vista-based computer belongs to another domain in this forest.
• You lock the Windows Vista-based computer.

In this scenario, you cannot unlock the computer by entering the account password.

This issue occurs if the following conditions are true.

• You configure the “Assign a default domain for logon” Group Policy setting, and then you set the domain to which you log on as the default domain.
• You log on to the domain from the Windows Vista-based computer by entering the user name without including the domain name.

In an Active Directory site that includes only read-only domain controllers (RODCs), service principal names (SPNs) are not registered. Therefore, you may experience various problems on client computers that are running Windows Vista, Windows Server 2003, or Windows XP. For example, you cannot install Microsoft ISA Server. Or, mutual authentication fails.