Deployment Solution

After upgrading from DS6.5SP1 to 6.9 SP1 users are experiencing varying degrees of restrictions of rights. Some cannot schedule or run jobs (as detailed in KB 44235), to not being able to log into the console at all. Rights were being derived from membership in an AD group. Security works if user AD account added indivually. Removed and re-added security groups via Add and Import methods without change and evalulating rights says they have admin rights, but when trying to log in access denied, bad username or password. Applied Maintenace pack 1 to bring the build to 365 without effect. I have 40+ of these servers so I really need group membership to work. Any ideas?

Try disabling security on one server, reboot then re-enable security. You might need to re-setup security after the reboot.

Nope. Did as suggested without effect. then turned off security and deleted all users and groups before rebooting. DS see members of group and assigns correct rights (evaluate). but will not allow console login to user from group with Admin rights until user entered seperately.