Technical Library | Support

Go to the table of contents Go to the previous page Go to the next page View or print as PDF
User Identification > DC Agent > The dc_config.txt file
The dc_config.txt file
Web Security Help | Web Security Solutions | Version 7.8.x
DC Agent works by identifying domain controllers in the network, and then querying those domain controllers for user logon sessions. By default, the agent automatically verifies existing domain controllers and detects new domains or domain controllers added to the network.
*
By default, DC Agent performs domain discovery (identifying domains and domain controllers) at startup, and every 24 hours thereafter.
*
Either DC Agent or User Service can be used to perform domain discovery.
For information about enabling domain discovery and setting the discovery interval, see Configuring DC Agent.
DC Agent stores domain and domain controller information in a file called dc_config.txt (located, by default, in the C:\Program Files or Program Files (x86)\Websense\Web Security\bin\ directory on each DC Agent machine).
Edit the dc_config.txt file to change which domain controllers DC Agent polls:
1.
Go to the Websense bin directory (by default, C:\Program Files or Program Files (x86)\Websense\Web Security\bin) on the DC Agent machine.
2.
Make a backup copy of the dc_config.txt file in another location.
3.
Open the original dc_config.txt file in a text editor (like Notepad).
4.
Confirm that all of your domains and domain controllers are listed. For example:
[WEST_DOMAIN]
dcWEST1=on
dcWEST2=on
[EAST_DOMAIN]
dcEAST1=on
dcEAST2=on
5.
If there are domain controllers in the list that DC Agent should not poll, change the entry value from on to off. For example:
dcEAST2=off
*
If you configure DC Agent to avoid polling an active domain controller, the agent cannot transparently identify users logging on to that domain controller.
*
If DC Agent's automatic domain discovery has detected a domain controller that should not be used to identify users, set the entry to off, rather than removing it. Otherwise, the next discovery process will re-add the controller.
6.
If there are domain or domain controller entries missing from the list, you can add them manually. Before adding entries, run the net view /domain command on the DC Agent machine to make sure that the agent can see the new domain.
7.
Save your changes and close the file.
8.
Restart the Websense DC Agent service.

Go to the table of contents Go to the previous page Go to the next page View or print as PDF
User Identification > DC Agent > The dc_config.txt file
Copyright 2016 Forcepoint LLC. All rights reserved.