if you want to 'map' to a domain user you need to use the 'automation principal'. you cannot map to a domain user in the way you attempted to.
Thanks a lot for you reply Bill.
Can you please point me to the document to create the AP.
is the AP compatible for the Windows patching?
So once I have created the AP, Do I required to remove the users.local entry which I have created early on all the servers, ......Hope the users & users.local will not be used when we are implmenting the AP?
one of the requirements of the AP is that the nsh client on the appservers is configured to use the nsh proxy.
you don't need to remove anything on the servers. you actually still need to push acls i believe because the blade user:role access should still be enforced.