Hi all
We have installed 10.2 version of UIA in new win 2019 server as our 2012 server would be shutdown soon. The problem is after configuring all the required permissions the agent status overall is connected, but on all our ADs listed in UIA, the status is stuck at connecting and after sometimes we get Access is Denied status as well. The service account used for new UIA is the same as old setup which is working fine on win 2012.
There is a PA in between which has policy to allow such traffic. Surprisingly though the agent is fetching user info from the ADs but we are reluctant to integrate this new setup with PA due to the problem stated above.
We have already tried all the KBs available for such logs/msg like patch upgrade or running it as admin etc etc
Anyone can shed a light on how further we can tshoot this problem.
The specific error on the log file is
Error 115 : Cannot open security log for XYZ. Access is denied.
@JamshedDayar wrote:
Hi all
We have installed 10.2 version of UIA in new win 2019 server as our 2012 server would be shutdown soon. The problem is after configuring all the required permissions the agent status overall is connected, but on all our ADs listed in UIA, the status is stuck at connecting and after sometimes we get Access is Denied status as well. The service account used for new UIA is the same as old setup which is working fine on win 2012.
There is a PA in between which has policy to allow such traffic. Surprisingly though the agent is fetching user info from the ADs but we are reluctant to integrate this new setup with PA due to the problem stated above.
We have already tried all the KBs available for such logs/msg like patch upgrade or running it as admin etc etc
Anyone can shed a light on how further we can tshoot this problem.
The specific error on the log file is
Error 115 : Cannot open security log for XYZ. Access is denied.
Your comments are a little confusing. You have UIA installed on 2012 member servers previously. You have a new 2019 member server that has UIA installed on it.
It's the UIA on the 2019 member server that has lets say 10 domain controllers it's monitoring. Of those 10 ALL of them sometimes say connected and other times ALL of them say access denied? Or is there a subset of the 10 that will say access denied?
I would agree with @BPry -- this is usually because of the service account that's running the UIA doesn't have the needed permissions to read the AD event logs on the DC, or maybe the service account isn't running the UIA software like it needs to be.
I would follow the UIA deployment process step by step again. I bet you resolve your issue.
