Hello ,everyone
I installed DSFW (OES11 SP1),I created a univeral password policy for DSFW Domain.Then I imported users by ldif files ,and some users were created by consoleone.

After I joined one XP into DSFW/AD Domain,Domain Administrator can log into .The user created by consoleone or ldif,can not log into Domain.

But the user created by iManager,can log into Domain.

Can somebody help me?Thank you very much!