Unable to enroll/authenticate PGP Desktop clients when using Microsoft Active Directory Domain's Logon Restrictions with a User