IDM 4.02 engine, running on RHEL 6. AD remote loader is version 4.0.0,
running on a Windows 2008R2 domain controller. After working perfectly
for over a year, we now have an issue where passwords sync normally from
the vault to AD, but not in the other direction, unless they're set by
an administrator. As far as I can tell, password changes performed by
the user via CTL+ALT+DEL don't even show up in the driver trace. How is
that possible?