Have they ever been able to login?
Confirm their user ID matches their samaccount name (assuming that's what you're using).
Confirm the authentication method is LDAP auth.
If you change them to footprints auth and give them a password, can they log in?
Yes, they have been able to log in, in the past, with the same account/credentials.
Authentication method for these two agents is LDAP.
I can change their account from LDAP to Footprints and have them enter a password, and they CAN log in.
Their accounts are the same (userid matches userid)
Have their AD OU's changed. I have that issue every once in a while and our AD team will have moved a person into a different OU.
That was it, the Admins moved them to another OU, fixed that issue and they were able to log in. Thanks for the assistance.