Problem:
User accounts are locked out when using CAC authentication.
Effected:
Windows 7, 8.1 and 10
Description:
User accounts are locked out in Active Directory when attempting to logon to a VDI desktop while CAC authentication is enabled, ProfileUnity runs as a service and VHD user profile disks are used. The logon process stalls and remains on the "Welcome..." screen in Windows.
Resolution:
Ensure the proper additional configurations required for CAC authentication have been set per the Knowledge Base document linked below:
How To Use Profiledisk When Also Using CAC For Authentication
In addition to the process outlined in the above document, CAC authentication must also be enabled in the ProfileUnity GPO "Computer Configuration" as shown in the screenshot below:
Product: ProfileUnity-FlexApp
Product Version: 6.7