Service Accounts Used By Data Insight for Monitoring are Being Locked

book

Article ID: 100051574

calendar_today

Updated On:

Description

Error Message

There are multiple error messages that can be seen. They usually refer to Access Denied or Account is locked

Reference:

Veritas Data Insight Administrator's Guide - Handling Changes in Account Password

Cause

The most common cause is that the password has not been updated in the Saved Credentials section of Data Insight. 

Data Insight will attempt to access the resources using these credentials. After a password change in Active Directory, if the Saved Credentials section is not updated with the new password, it will attempt to login using the old password and can cause the account to become locked out after a few tries, depending on the account lockout policy. 

Resolution

When there is a service account password change in AD which is also used by DI, it is imperative that the corresponding saved Credential in Data Insight is updated at the same time. 

To achieve this, go to Data Insight Console - Settings - Inventory - Saved Credentials

Select the Edit button for the appropriate account and update the password, followed by the Save button.

Issue/Introduction

The accounts used by Data Insight under Saved Credentials for monitoring the environment (CIFS/NFS monitoring, AD/LDAP scanning, SharePoint monitoring, DLP/EV integration, Custom Actions, etc.) are periodically being locked out and need user intervention to unlock them from Active Directory. This usually occurs after the account password has been changed and there is a failed login attempt policy in the environment.