When adding a Windows account to either Admin Console for repository access or LFDS/LM for a license, I've noticed different results in different systems. The Admin Console lookup appears more native to Active Directory against LFDS/LM. Admin Console also seems to be consistent whereas LFDS/LM may have trouble in environments with more security or multiple trusted domains. What account is being used to communicate to AD for both apps? Service account, IIS or user running the app/browser?

Assume for this example that this is a single server...all LF apps reside on one box. Why would the same service account user, same IIS user, same app user be able to perform AD user lookup in Admin Console but not in LFDS? AD elevation seems to resolve this but cannot be set permanently.

I'm hoping for general info but can troubleshoot further with a support case later.