Error during data collection: 'unable to build domain cache for domain...'

Article:TECH189675  |  Created: 2012-05-24  |  Updated: 2012-08-29  |  Article URL http://www.symantec.com/docs/TECH189675
Article Type
Technical Solution


Subject

Issue



During data collection in Control Compliance Suite (CCS) 11, following error is seen:unable to build domain cache for domain <domain name>


Cause



Domain admin credentials were not provided for building domain cache.


Solution



In CCS 11 by design of the product, domain admin or equivalent credentials are required to build domain cache. Here is the explanation of why it requires domain admin privileges...

CCS performs deep scanning on Windows Assets, in which it is required to do effective membership analysis for domain users & groups. Apart from this it also reads computer and users information from the domain controller (Active Directory).
To calculate the effective group membership it requires the trusted domain information and trusted domain SID, which is read from the domain controller. 
Non domain admin user account does not have the necessary permissions to read this information from the domain and hence a domain admin account is required for this purpose.

CCS does not write anything to the active directory.  
 


Supplemental Materials

SourceETrack
Value2874226



Article URL http://www.symantec.com/docs/TECH189675


Terms of use for this information are found in Legal Notices