Go to the table of contents Go to the previous page Go to the next page View or print as PDF
Troubleshooting > User configuration and identification issues > DC Agent has insufficient permissions
DC Agent has insufficient permissions
Web Security Help | Web Security Solutions | Version 7.8.x
DC Agent may have been installed as a service using the Guest account, equivalent to an anonymous user to the domain controller.
In order to perform domain discovery (required for DC Agent to create and maintain the dc_config.txt file), or to perform computer polling, the Websense DC Agent service requires domain admin permissions. In some environments (typically very large enterprise networks), DC Agent requires enterprise admin permissions.
If you have disabled domain discovery and computer polling, and are just using domain controller polling while maintaining the dc_config.txt file manually, DC Agent can run as any network user with read access to the domain controller.
To grant DC Agent domain admin privileges:
1.
On the DC Agent machine, create a user account with a descriptive name, like WsUserID. This account exists only to provide a security context for DC Agent when it requests information from the directory service.
*
Assign the new account domain admin privileges in all domains.
*
*
Make a note of the user name and password.
2.
*
*
3.
Scroll to the Websense DC Agent service, right-click the service name, and then select Stop.
4.
Right-click the service name again, select Properties, and then click the Log On tab.
5.
Select This account, and then enter the account name and password that you created for DC Agent. Some domains require that the account name be entered in the format domain\username.
6.
Click OK to return to the Services tool.
7.
8.
You may also need to assign User Service the same administrative privileges as DC Agent.

Go to the table of contents Go to the previous page Go to the next page View or print as PDF
Troubleshooting > User configuration and identification issues > DC Agent has insufficient permissions
Copyright 2016 Forcepoint LLC. All rights reserved.