Different groups can't log in to 10.6
Here's the problem I've got, we have 10 iMAC's running OS X 10.6, we have 1 MAC Mini server running server OS X 10.6. The OD is bound to AD, and the clients are bound to the AD & OD.
So far so good. I have 3 groups setup in OD, 1 for Staff, 1 for Pupils, 1 for Admins.
The groups contain the following AD groups.
OD Staff -> AD Staff
OD Pupils -> AD Pupils
OD Admins -> AD Domain admins.
When I login, I can login using an AD Staff account or an AD Domain Admin account. When I try and login using an AD Pupil account I get an error saying the account <name> cannot log in at this time. An error has occured.
Can anyone shed any light as to why this only happens when I use an AD Pupil account and not any other AD accounts? I haven't set any restrictions on my OD server yet so the only difference is that the AD groups are different for staff and pupils.