Try this on your ad server   https://technet.microsoft.com/en-us/library/cc780271(v=ws.10).aspx   Password history check (N-2):  Before a Windows Server 2003 operating system increments  badPwdCount , it checks the invalid password against the password history. If the password is the same as one of the last two entries that are in the password history,  badPwdCount  is not incremented for both NTLM and the Kerberos protocol. This change to domain controllers should reduce the number of lockouts that occur because of user error. ... View more

You can do this on wlan settings on the controller.  See this link for info/details   http://www.cisco.com/c/en/us/support/docs/wireless/5500-series-wireless-controllers/113682-bdr-limit-guide-00.html ... View more

What is the device type?  I have seen this with 4 android 5 devices.  I think its something to due with misconfig on android and mfp settings.  Although I'm not sure why I have hundreds of other android 5 devices working ok.  I see this same when I debug one of the devices that is stuck in DHCP_REQ   *apfMsConnTask_4: Mar 18 10:20:11.346: ac:cf:23:41:bb:76 Processing RSN IE type 48, length 20 for mobile ac:cf:23:41:bb:76 *apfMsConnTask_4: Mar 18 10:20:11.346: ac:cf:23:41:bb:76 Received 802.11i PSK key management suite, enabling Authentication *apfMsConnTask_4: Mar 18 10:20:11.346: ac:cf:23:41:bb:76 RSN Capabilities: 0 *apfMsConnTask_4: Mar 18 10:20:11.346: ac:cf:23:41:bb:76 apfValidateDot11iCapabilities:1286 Received RSNIE with Capabilities with STA MFPC: 0, STA MFPR:0, & AP MFPC:0MFPR:0 *apfMsConnTask_4: Mar 18 10:20:11.346: ac:cf:23:41:bb:76 Marking Mobile as non-11w Capable *apfMsConnTask_4: Mar 18 10:20:11.346: ac:cf:23:41:bb:76 apfValidateDot11wGroupMgmtCipher:1716, Received NULL 11w Group Mgmt Cipher Suite for STA, hence returning *apfMsConnTask_4: Mar 18 10:20:11.346: ac:cf:23:41:bb:76 pemApfDeleteMobileStation2: APF_MS_PEM_WAIT_L2_AUTH_COMPLETE = 0. *apfMsConnTask_4: Mar 18 10:20:11.347: ac:cf:23:41:bb:76 0.0.0.0 DHCP_REQD (7) Deleted mobile LWAPP rule on AP [64:d9:89:47:fb:d0] *pemReceiveTask: Mar 18 10:20:11.347: ac:cf:23:41:bb:76 0.0.0.0 Removed NPU entry.     Here is some links with more info about possible mfp issues     http://forum.xda-developers.com/google-nexus-5/help/android-5-0-wlan-bug-peap-maschapv2-t2938281/page4   http://www.reddit.com/r/Nexus5/comments/2pdv2y/wifi_authentication_issues_with_nexus_5_after/     https://code.google.com/p/android/issues/detail?id=78702 ;  comments 30,39,52,53,78     http://w1.fi/cgit/hostap/commit/?id=9f6a7cddc42811883d6035032854089475f2fc65   ... View more

How did they go about unlocking it?  I have tac case open as well could I get your case number to reference on mine? ... View more

I have those same processes stuck running as well.  So restarting the vm makes it work temp? ... View more

I'm also having issues with mse too.  I can't open report launchpad either.  I have tac cases open as well. Will update when I hear something ... View more

I have the same issue with no data being displayed on the dashboard/dashlets.  I also did clean vm and imported from 1.4.  I have tried to stop/start prime from cli but it didn't help. ... View more

This was absolutely one of the best preso's/webinars I have ever attended.  Really nice breakdown of the material.  Would love to see more from you in the future. ... View more

Did you ever get any resolution to this problem   ... View more

FYI I followed the guide that I referenced for distributed deployments.  This method worked great!!  While your method does work as you said.  I think by upgrading the psns first then you would lose logging as there wouldn't be any mnt nodes that are on the same version.  At least until you upgrade one of the mnt nodes.  The order I did was   1) Secondary Admin 2) Primary MNT 3) PSN 4) PSN 5) Secondary MNT 6) Primary Admin (which will be secondary in this new deployment)   Then login directly to the the new secondary admin and promote it back to its original persona.  Primary admin ... View more