Hi,
When working with Exchange, I always enable "split domain from username" check box in logon page. after that, 3 variables are created when user authentication with domain\username:
- session.logon.last.username : username
- session.logon.last.domain : domain
- session.logon.last.logonname : domain\username
then I create an AD query with filter :
(|(sAMAccountName=%{session.logon.last.username})(UserPrincipalName=%{session.logon.last.logonname})(mail=%{session.logon.last.logonname}))
and assign username from smaccounrname before AD Auth
session.logon.last.username = mcget {session.ad.last.attr.sAMAccountName}
to support multiple tries, insert all these boxes (from logon page to AD Auth) in a macro with loop count 3 and change AD Auth reties to 1.