Technical Library | Support

Go to the table of contents Go to the previous page Go to the next page View or print as PDF
Troubleshooting > User configuration and identification issues > DC Agent unable to access required file
DC Agent unable to access required file
Web Security Help | Web Security Solutions | Version 7.8.x
DC Agent works by identifying domain controllers in the network, then querying them for user logon sessions. By default, the agent automatically verifies existing domain controllers and detects new domains or domain controllers added to the network. It stores this information in a file called dc_config.txt, located in the Websense bin directory on the DC Agent machine.
An alert stating that DC Agent is unable to access this file can occur if:
*
DC Agent is unable to open the file with read or write permissions.
*
Make sure that the domain account used to run DC Agent has read and write permissions to the file and directory.
*
If the file is present, and not write protected, make sure that the file can be opened manually, and has not been corrupted.
*
DC Agent is unable to create the file, because it cannot find any domain controller information.
*
If User Service is installed on a Websense appliance or Linux server, make sure that you have performed required WINS setup steps. For complete instructions, see User Service on a Websense appliance or Linux server.
*
If User Service is installed on a Windows Server 2008 machine, make sure that the service is running with domain admin credentials. See Changing DC Agent, Logon Agent, and User Service permissions.
*
Make sure that NetBIOS for TCP/IP is enabled, and that the NetBIOS ports (137, 138, 139, and 445) are open between the DC Agent machine and the domain controller.
If User Service is running on Windows, make sure that the NetBIOS ports are also open between the User Service machine and the domain controller.
*
Make sure that the Computer Browser Service is running on any Windows 2008 Server machine that hosts DC Agent, User Service, or Active Directory. See Turning on the Computer Browser service.
*
DC Agent does not find any valid entries in the file.
*
Make sure that at least one domain controller entry in the file is enabled. If all entries are disabled, DC Agent has effectively been instructed to stop working.
*
Make sure that all entries in the file are in a valid format. For example:
[WEST_DOMAIN]
dcWEST1=on
dcWEST2=on
[EAST_DOMAIN]
dcEAST1=on
dcEAST2=off

Go to the table of contents Go to the previous page Go to the next page View or print as PDF
Troubleshooting > User configuration and identification issues > DC Agent unable to access required file
Copyright 2016 Forcepoint LLC. All rights reserved.