Locate error messages

To start troubleshooting DC Agent user identification problems, start by assessing the status of the DC Agent service:

1. On the DC Agent machine, open the Windows Services tool and make sure that the Websense DC Agent service has started. If the service has stopped, right-click the service name and attempt to start it.

   Regardless of whether the service starts, was already started, or refuses to start, continue with the next step.

2. Open the Windows Event Viewer to look for error messages and warnings from the Websense DC Agent service.

The most common DC Agent errors are:

• ERROR_ACCESS_DENIED, which indicates a permissions issue. Although they do not make any changes to the domain, both DC Agent and User Service must run with domain administrator privileges. If you suspect a permissions issue, you can enable directory service auditing to find out what user and group information your software is trying to access. See DC Agent: ERROR_ACCESS_DENIED - 5.
• ERROR_BAD_NETPATH, which indicates a network communication issue. See DC Agent: ERROR_BAD_NETPATH - 53.