Maybe I am missing something here....but when I try and set the userWorkstations attribute in Active Directory to isolate which computer a user can login to, I get the ZCM login prompt and cannot login to the ZCM zone. If I delete the computers in that attribute, ZCM will login the account without any issues. Is there some setting that must be enabled so that I can make sure account restrictions in AD do not prevent the ZCM agent from loging in to the zone?