i had removed BISystemUser from MSAD and confirm that BISystemUser only exist on DefaultAuthenticator with SUFFICIENT access right. Unfornately , the result is the same. another strange thing is...whenever the BISystemUser account authenication failed, it will lock one of users window account(Admin). i have no clue why his…

cool thanks! i thought BISystemUser had to be exist on MSAD, ok i will give it a go. virtualize= true this property must set right?? thanks a lot

Thanks Joel for your speedy reply! i did reset the trusted user and even reset the ldap trusted user password too. however, the results is the same