I resolved this issue.
My mistake was to have the services behind vCAC running as a local admin user on the host. Once I changed these to be an AD user, it works fine.
The VCAC server service, and the login to the SQL server both need to be AD users, I think.
Hope this helps someone.