Security Compliance

Unable to connect to the resource using the account

This article addresses an error message that is displayed in the Patch Manager MMC Console when you run an inventory task for a domain or try to browse the domain objects. Error message: The scope resolution task failed to execute. Exception occurred at 1xxxx: Unable to connect to Active Directory (ADNAME). No Domain Controllers responded to the request. Unable to connect to the resource using the account: account

First published date

10/17/2018 10:16 PM

Last published date

8/19/2020 10:03 AM

Overview

When you run a Managed computer inventory task for a domain manually or it has been configured to run per schedule, the following error message is displayed: 

The scope resolution task failed to execute. Exception occurred at 1xxxx: Unable to connect to Active Directory (ADNAME). No Domain Controllers responded to the request. 
Unable to connect to the resource using the account: account 
Reason: Unable to connect to Active Directory (ADNAME). No Domain Controllers responded to the request.

A slightly different but similar error is seen when you try to select the AD object in Microsoft Windows Network view, you see following error in log file and UI

2020/08/19 08:48:09:614 PID: 8804 TID:  8904 [ERROR] WorkerProcessJob::LDAPSelectQuery() failed. Message: System.Exception: Unable to connect to the resource using the account: MyDomain\administrator Reason: There is no such object on the server.
 ---> System.DirectoryServices.DirectoryServicesCOMException: There is no such object on the server.
   --- End of inner exception stack trace ---
Stack Trace:    at System.DirectoryServices.DirectoryEntry.Bind(Boolean throwIfFail)


 

Product section

Patch Manager

Cause

  • The NetBIOS Domain name is different than the Domain NT-Flat name identified in the Managed Resource.
  • PM is trying to access a Domain that is mis-configured or does not exists.

Resolution

If the error is related to Schedule Inventory task, reschedule the inventory task as outlined in Schedule inventory tasks to populate empty reports after you have performed below validation checks:

Steps to re-configure the domain in Patch manager management groups:
  1. Open a command prompt on the Patch Manager server.
  2. Execute: 
    whoami or set

    The NetBIOS domain name / userdomain values.

  3. Launch Patch Manager Admin Console.
  4. In the navigation pane, expand Patch Manager System Configuration > Management Groups and select Managed Enterprise(default name).
  5. In the Actions Pane, click the Management Group Wizard.
  6. In the Name field, enter the NetBIOS name identified from the command, then type the FQDN.
  7. Click Resolve.
  8. Click Add Domain/Workgroup and then complete the wizard.To remove the inaccurate entry, select the entry and click Remove.
  9. Also, remove the old Domain that is no longer valid from the Microsoft Windows Network pane
  10. Complete the wizard and re-launch the Patch manager Console
Refer to Configure managed resources to the group for more details related to this topic.