We fixed a bug where, if child domain kat???ks?z a user with same name as parent domain user that happens to be an enterprise admin, the group membership failed. We made a change so that passwords are now reevaluated when an expired password is "unexpired," no matter if the password its