Group 'Windows Authorization Access' is required

Depending upon the Active Directory configuration, some users will not be able to login using dbFront.   They will get an error message that says something like:

• Security Group 'Windows Authorization Access' group is required to validate some AD users.
• For more help see: http://dbfront.com/ADWinAuthAccessGrpReq

The reason is that the service user account under which the dbFrontService is running is not permitted to query Active Directory for some types of group membership.

Please see: https://support.microsoft.com/en-us/kb/331951 for more information.

Solution

The solution is to either:

1. Update the service so that it runs under a user account which is a member of the "Windows Authorization Access" group, or
2. Join the server running the dbFrontService to the active directory domain.