A new KB article was released regarding SSO on Windows Server 2008 R2 SP1 and Windows 7
An SSO solution that calls the LsaLogonUser function to pass a KERB_TICKET_LOGON structure for Kerberos authentication does not work in Windows 7 SP1 or in Windows Server 2008 R2 SP1
http://support.microsoft.com/kb/2526946
Additional info:
In an Active Directory domain environment, you deploy a Single Sign-On (SSO) solution on client computers that are running Windows 7 Service Pack 1 (SP1) or Windows Server 2008 R2 Service Pack 1 (SP1).
The SSO solution calls the LsaLogonUser function to pass a KERB_TICKET_LOGON structure for Kerberos authentication.
In this scenario, the SSO solution does not work. Additionally, you receive an error message that resembles the following:
STATUS_TRUSTED_RELATIONSHIP_FAILURE
Note The SSO solution works on client computers that are running other Windows operating systems.
No comments:
Post a Comment