Even on a freshly imaged machine, where the agent is installed from the web and/or deployed from ZCC, I get the same thing:

NAL shows Admin.zch.zcs logged in

and

Agent shows Admin.zcs as logged in.

I have checked many articles and tids. I have set the zenworks server up as ZCMSVR1 hostname and ip 10.105.100.152 IP. I can resolve the FQDN ZCMSVR1.Zacharyschools.org, but not ZCMSVR1 from any server, including the ZCM server.

I have my Zenlgn.log:

[ZENLGN-294-298] Log file opened - 15APR2008 20:40:05.078 - max log size 0KB (0x00000000KB, 0MB)

ZENLGN [294-298] [20:40:05] ZenLgnLoginUI entered
ZENLGN [294-298] [20:40:05] It would appear that we have been called from the Winlogon process (NWGina.dll)
ZENLGN [294-298] [20:40:05] AUTHTOKENLoadDLL called!
ZENLGN [294-298] [20:40:05] MICASALoadDLL called!
ZENLGN [294-298] [20:40:05] WTSLoadDLL called!
ZENLGN [294-298] [20:40:05] WTSLoadDLL returning
ZENLGN [294-298] [20:40:05] RegQueryValueEx on value DisablePassiveModeLogin Failed: 2
ZENLGN [294-298] [20:40:05] CheckIfLoginAllowed Entered
ZENLGN [294-298] [20:40:05] Checking if this machine is an NT Server.
ZENLGN [294-298] [20:40:05] Microsoft Windows XP ZENLGN [294-298] [20:40:05] Professional
ZENLGN [294-298] [20:40:05] CheckIfLoginAllowed returning TRUE
ZENLGN [294-298] [20:40:05] IsWorkstationConnected entered
ZENLGN [294-298] [20:40:05] IsWorkstationConnected returning 0
ZENLGN [294-298] [20:40:05] Calling ZENGetAssociatedRealmNames
ZENLGN [294-298] [20:40:05] ZENGetAssociatedRealmNames returned
ZENLGN [294-298] [20:40:05] Found Realm : ZACHARY
ZENLGN [294-298] [20:40:05] We found 1 realm(s).
ZENLGN [294-298] [20:40:05] bTryLoginWithoutPrompt is TRUE
ZENLGN [294-298] [20:40:05] LgnGetPassiveLoginRetryParameters entered
ZENLGN [294-298] [20:40:05] *pdwRetryCount = 0
ZENLGN [294-298] [20:40:05] *pdwRetryInterval = 15000
ZENLGN [294-298] [20:40:05] ZenLgnLogin entered
ZENLGN [294-298] [20:40:05] Calling ZenLgnSetCasaCredentials
ZENLGN [294-298] [20:40:05] ZenLgnSetCasaCredential entered
ZENLGN [294-298] [20:40:05] Username is: Admin
ZENLGN [294-298] [20:40:05] RealmName is: ZACHARY
ZENLGN [294-298] [20:40:05] About to call miCasaSetCredential
ZENLGN [294-298] [20:40:05] Returned from calling miCasaSetCredential
ZENLGN [294-298] [20:40:05] miCASASetCredential successful for ZACHARY!.
ZENLGN [294-298] [20:40:05] ZenLgnSetCasaCredential returning 0
ZENLGN [294-298] [20:40:05] ZenLgnSetCasaCredentials returned
ZENLGN [294-298] [20:40:05] Calling ZENGetHostNames
ZENLGN [294-298] [20:40:05] ZENGetHostNames returned
ZENLGN [294-298] [20:40:05] Retrieved host names are:
ZENLGN [294-298] [20:40:05] zcmsvr1.zacharyschools.org
ZENLGN [294-298] [20:40:05] 10.105.100.153
ZENLGN [294-298] [20:40:05] About to call ObtainAuthToken with the following parameters
ZENLGN [294-298] [20:40:05] szServiceNameA is: com.novell.zenworks.ZACHARY
ZENLGN [294-298] [20:40:05] szHostNameA is: zcmsvr1.zacharyschools.org
ZENLGN [294-298] [20:40:05] dwAuthTokenSize is: 0
ZENLGN [294-298] [20:40:05] ObtainAuthToken Failed: 0xC7FF0023
ZENLGN [294-298] [20:40:05] About to call ObtainAuthToken with the following parameters
ZENLGN [294-298] [20:40:05] szServiceNameA is: com.novell.zenworks.ZACHARY
ZENLGN [294-298] [20:40:05] szHostNameA is: 10.105.100.153
ZENLGN [294-298] [20:40:05] dwAuthTokenSize is: 0
ZENLGN [294-298] [20:40:09] About to call ObtainAuthToken with the following parameters
ZENLGN [294-298] [20:40:09] szServiceNameA is: com.novell.zenworks.ZACHARY
ZENLGN [294-298] [20:40:09] szHostNameA is: 10.105.100.153
ZENLGN [294-298] [20:40:09] dwAuthTokenSize is: 3409
ZENLGN [294-298] [20:40:10] LgnSetZenUsernameHistory
ZENLGN [294-298] [20:40:10] LgnSetRealmNameHistory
ZENLGN [294-298] [20:40:10] CacheUsersZenName Entered
ZENLGN [294-298] [20:40:10] CacheUsersZenName returning: 0
ZENLGN [294-298] [20:40:10] ZenLgnLogin returning 0
ZENLGN [294-298] [20:40:10] ZenLgnLoginUI exiting: 0

I see the obtainauthtoken failed in the first instance, but when it uses the IP address for the hostname, it seems to succeed? If I can resolve ZCMSVR1.zacharyschools.org, then why is it failing that first authentication?

I have other logs as well, but for brevity's sake, I will save them until asked for.

Surely the agent and the NAL window should both show the user that was logged into the novell client as the one logged in correct? Or am I crazy?