Fix Available: Cannot schedule jobs using Active Directory group authentication on Deployment Solution 6.9 SP1

Problem/Symptoms

Active Directory (AD) users that are imported into the Deployment Server database via Active Directory Groups do not have rights to schedule jobs.

Steps to reproduce:

1. Add an AD group to Deployment Solution.  Assign the group the 'Administrator' right to the console.  
2. Do not add the specific AD user.
3. Login as a user that from the AD Group.
4. Attempt to schedule a job.
5. The right to schedule a job is not available.

Note: If the 'Evaluate Rights' button is viewed the rights for the specific AD group will evaluate successfully (as though they have the rights).

---

Resolution

Symantec has created a hotfix to resolve this issue.  Follow the steps below to install the fix:

1) Shutdown all Deployment Server consoles.
2) Stop the 'Altiris Express Server' service.
3) In the Deployment Server directory (E.g. C:\Program Files\Altiris\eXpress\Deployment Server) rename express.exe to express.lic.
4) Download the updated 'Express.exe' to the the Deployment Server directory.
5) Open the 'Product Licensing Utility' and use 'express.lic' from the Deployment Server directory to license the new  express.exe file.
6) Start the 'Altiris Express Server' service.

Note: The express.exe included in this KB is the same express.exe used in KB 44220.