Looks like you've been too restrictive with your permissions. KiXtart pulls it's information out of AD, too, and if the user that KiXtart runs under does not have the permission to read the information, then KiXtart will fail.

So, basically, everything is working as advertised, it's just that your environment has been locked down a little bit too much.
_________________________
There are two types of vessels, submarines and targets.