everything seems to be configured ok, nevertheless local accounts do not get created. here's what nwgina.log says:

03/16/2007 12:04:11:359 [1F8-1FC] STOG: Username = Lothar Haeger
03/16/2007 12:04:11:359 [1F8-1FC] STOG: Context = my.context
03/16/2007 12:04:11:359 [1F8-1FC] STOG: Tree = TREE
03/16/2007 12:04:11:359 [1F8-1FC] GinaGetTypedUserDN entered
03/16/2007 12:04:11:359 [1F8-1FC] Reading object info for : Lothar Haeger.my.context
03/16/2007 12:04:11:390 [1F8-1FC] User's typed DN : CN=Lothar Haeger.OU=my.O=context
03/16/2007 12:04:11:390 [1F8-1FC] GinaRemoveBackslashesFromStrings entered
03/16/2007 12:04:11:390 [1F8-1FC] GinaGetTypedUserDN returning 0
03/16/2007 12:04:11:390 [1F8-1FC] GinaProcessDynamicLocalUser called!
03/16/2007 12:04:11:390 [1F8-1FC] CheckIfWorkstationManagerEnabled entered
03/16/2007 12:04:11:390 [1F8-1FC] Comparing configured tree : TREE
03/16/2007 12:04:11:390 [1F8-1FC] Workstation Manager feature *IS* configured!
03/16/2007 12:04:11:390 [1F8-1FC] WMPMLoadDLL called!
03/16/2007 12:04:11:390 [1F8-1FC] WMSCHAPILoadDLL called!
03/16/2007 12:04:11:390 [1F8-1FC] GinaRemoveBackslashesFromStrings entered
03/16/2007 12:04:11:390 [1F8-1FC] Checking if this machine is an NT Workstation.
03/16/2007 12:04:11:390 [1F8-1FC] RegQueryValueEx Failed: 2
03/16/2007 12:04:11:390 [1F8-1FC] CheckIfSpecialHandlingOfKerberosUsernameRequired entered.
03/16/2007 12:04:11:390 [1F8-1FC] RegOpenKeyEx Failed: 2
03/16/2007 12:04:11:390 [1F8-1FC] CheckIfSpecialHandlingOfKerberosUsernameRequired returning FALSE
03/16/2007 12:04:11:390 [1F8-1FC] Canonicalized Name : CN=Lothar Haeger.OU=my.O=context
03/16/2007 12:04:13:500 [1F8-1FC] GinaProcessDynamicLocalUser exiting with 1240
03/16/2007 12:04:13:500 [1F8-1FC] GinaLoginLocal entered
03/16/2007 12:04:13:500 [1F8-1FC] Attempting local login
03/16/2007 12:04:13:500 [1F8-1FC] User Name : 'Lothar Haeger'
03/16/2007 12:04:13:500 [1F8-1FC] Domain : 'KOELTERM01'
03/16/2007 12:04:13:500 [1F8-1FC] Setting passwords to NOT synched
03/16/2007 12:04:13:500 [1F8-1FC] GinaIsActiveConsoleSession() called
03/16/2007 12:04:13:515 [1F8-1FC] LsaLogonUser FAILED 0xC000006D, SubStatus 0x0
03/16/2007 12:04:13:515 [1F8-1FC] GinaLsaLogonUser returning 3221225581
03/16/2007 12:04:13:515 [1F8-1FC] CheckIfDLUPasswordEncryptionIsRequired entered.
03/16/2007 12:04:13:515 [1F8-1FC] RegOpenKeyEx Failed: 2
03/16/2007 12:04:13:515 [1F8-1FC] CheckIfDLUPasswordEncryptionIsRequired returning FALSE
03/16/2007 12:04:13:515 [1F8-1FC] GinaLsaLogonUser FAILED 3221225581
03/16/2007 12:04:13:515 [1F8-1FC] LogonUser FAILED -1073741715
03/16/2007 12:04:13:515 [1F8-1FC] LogonUser FAILED 1326
03/16/2007 12:04:13:515 [1F8-1FC] Local login FAILED ask for the local password

now what does "exiting with 1240" mean? any ideas what might go wrong here?

thanks, Lothar

--