Problem:
During logon to ProfileUnity console, users get an error message: "impersonation failed do to LogonUser Only account that can login is local "Admin" account.
Symptoms:
ProfileUnity “CAC Secure Mode” is enabled and during logon to ProfileUnity console, users get an error message: "impersonation failed do to LogonUser
Possible Resolution(s):
If the GPO is setting this key to enable:
Computer Configuration\Windows Settings\Security Settings\Local Policies\Security Options\Interactive logon: Require smart card is enabled.
The user name and password will not work for the role or any other domain account when logging in to ProfileUnity.
- The workaround is to Disable the GPO:
- Computer Configuration\Windows Settings\Security Settings\Local Policies\Security Options\Ineractive logon: Require smart card
- Also you can verify following items on this list:
- Verify that user's have the rights to logon locally
- Verify that user's are local admin users on the ProfileUnity server.
Refer to "ProfileUnity Configuring Common Access Card Authentication" document.
Product: ProfileUnity
Product Version: 6.7.x