Problem 3.23(win2000) with new 2003 AD-servers, worked fine with 2000

[walruspro]

We have migrated from an AD on win2000 to 2003. The windows-dudes say that the AD and domain config is exactly tha same as previuos but my ACS 3.23 can't authenticate users anymore. I get "External DB account Restriction" in failed accounts. Also rebooted ACS.

Anyone have any hints where to start looking, searched for known issues but could not find any.

[smalkeric]

Cisco recommends that Cisco CallManager and Active Directory use the same DNS server. If you cannot use the same DNS server, you must provide the name to IP address mapping for all of the AD servers in your AD forest in the hosts file or use another DNS server that can resolve the names of all the Active Directory (AD) servers in your AD forest.

http://www.cisco.com/en/US/products/sw/voicesw/ps556/products_installation_and_configuration_guide09186a008011aa73.html