Web Security On-prem | Administrator Help

Home
Troubleshooting
User configuration and identification issues

Getting Started
The Status Dashboards
Internet Usage Filters
Web Protection Clients
Web Protection Policies
Content Gateway Analysis
Use Reports to Evaluate Internet Activity
Exceptions to Web Protection Policies
Block Page Management
Configure the Hybrid Service
Manage Off-site Users
Combine Web, Data, and Mobile Protection
Refine Your Policies
User Identification for Policy Enforcement
Delegated Administration and Reporting
Server Administration for Web Protection Solutions
Reporting Administration
Configure Network Agent
Troubleshooting
- Introduction
- Web protection installation and subscription issues
- Web protection database issues
- Filtering Service alert messages
- Network Agent issues
- User configuration and identification issues
  - User and group-based policies are not applied
  - Unusually high directory server connection latency
  - User Service is not available
  - DC Agent has insufficient permissions
  - DC Agent unable to access required file
  - DC Agent Domains and Controllers page is blank
  - I cannot add users and groups to the Forcepoint Security Manager
  - Changing DC Agent, Logon Agent, and User Service permissions
    Sometimes, DC Agent, Logon Agent, or User Service needs to run as an account that has permission to access the directory service.
- Health alerts and Usage Monitor issues
- Policy Server and Policy Broker issues
- Log Server and Log Database issues
- Investigative report and presentation report issues
- Other reporting issues for web protection solutions
- Forcepoint Web Security interoperability issues

User configuration and identification issues

User and group-based policies are not applied
Unusually high directory server connection latency
User Service is not available
DC Agent has insufficient permissions
DC Agent unable to access required file
DC Agent Domains and Controllers page is blank
I cannot add users and groups to the Forcepoint Security Manager
Changing DC Agent, Logon Agent, and User Service permissions
Sometimes, DC Agent, Logon Agent, or User Service needs to run as an account that has permission to access the directory service.

Related concepts

User and group-based policies are not applied

Unusually high directory server connection latency

DC Agent unable to access required file

I cannot add users and groups to the Forcepoint Security Manager

Related tasks

User Service is not available

DC Agent has insufficient permissions