Users are not always recognized by the SSO agent when it is installed on the domain controller.
When the SSO agent is installed on the Domain Controller, rather than on another server within the network, it is often seen that users are not authenticated properly, and that the permissions are therefore not applied to them properly.
This problem can typically be resolved by installing the SSO agent on a server that is NOT the domain controller. A complete list of supported Operating systems can be found in the release notes for the version of Directory Connector that is installed. Release notes can be found by going to www.mysonicwall.com. Navigate to Downloads | Download Center. Under Software Type click Directory Connector.