3507044 - Manual AD logins fail with error 'The Active Directory plugin could not authenticate at this time' for specific users

• Manual AD logins to BI Launchpad (BILP) and Central Management Console (CMC) fail with error:
  Account information not recognized: The Active Directory Authentication plugin could not authenticate at this time. Please try again. If the problem persists, please contact your technical support department
• Logging in to Central Configuration Manager (CCM) -> Manage Servers works fine with the same credentials
• In the Central Management Server (CMS) logs, below errors are seen in the user logon:
  WINAD: CAccountEntity::GetDomainFromSid() - GetWindowsAccountDomainSid returned error 0
  WINAD: CAccountEntity::GetDomainFromSID() - Domain(NT AUTHORITY) Name(ANONYMOUS LOGON) has SID_NAME_USE=5
  WINAD: ADNetworkBinding::BindIADsToDomainController() -- called with a path of <sid=010100000000000507000000>
  WINAD: ADNetworkBinding::GetDomainController() -- Looking up DC for NT AUTHORITY (FQDN)
  WINAD: ADNetworkBinding::GetDomainController() -- Domain format passed to DsGetDcName() is invalid. NT AUTHORITY
  WINAD: CAccountEntity::BindIADsToLDAPFromSid() -- Error getting a DC for the sid.
  assert failure: (ad_acct_entity.cpp:152). (false : WINAD: CAccountEntity::InitFromSid() -- BindIADsToLDAPFromSid hr=-2147467259).
  WINAD: ADAccountFactory::GetFromSid() -- Could not initialize account.
  WINAD: CKerbSessionMgr::GenServerContext() -- Users's SID seems to be invalid.
  WINAD: CKerbSessionMgr::GenServerContext() caught xn
  WinAD: AcceptKerbLogin failed: 103

• SAP BusinessObjects Business Intelligence Platform 4.x (BI 4.2 / 4.3)
• Active Directory
• Windows

KBA , BI-BIP-AUT , Authentication, ActiveDirectory, LDAP, SSO, Vintela , Problem