Symptoms
Certain users get disabled
Diagnoses
Based on the verbose ADUM logs, these users are being translated to AD computers with the same name
Resolution
1. Change the computer name, or
2. Update the RoleInit of the K2 Security Label to include: TranslateWithDirectoryServices=False
eg.
ADCache=0LDAPPath=LDAP://DC=DENALLIX,DC=COMTranslateWithDirectoryServices=False...
Re-enable the affected users and manually refresh.