DC Agent unable to access required file

DC Agent works by identifying domain controllers in the network, then querying them for user logon sessions. By default, the agent automatically verifies existing domain controllers and detects new domains or domain controllers added to the network. It stores this information in a file called dc_config.txt, located in the bin directory on the DC Agent machine.

An alert stating that DC Agent is unable to access this file can occur if:

  • DC Agent is unable to open the file with read or write permissions.
    • Make sure that the domain account used to run DC Agent has read and write permissions to the file and directory.
    • If the file is present, and not write protected, make sure that the file can be opened manually, and has not been corrupted.
  • DC Agent is unable to create the file, because it cannot find any domain controller information.
    • Make sure DC Agent is joined to the specific domain.
    • Make sure DC Agent can successfully do an nslookup on the Fully Qualified Domain Name (FQDN) to locate the domain controllers.
  • DC Agent does not find any valid entries in the file.
    • Make sure that at least one domain controller entry in the file is enabled. If all entries are disabled, DC Agent has effectively been instructed to stop working.
    • Make sure that all entries in the file are in a valid format. For example:

      [WEST_DOMAIN]

      dcWEST1.forcepoint.com=on

      dcWEST2.forcepoint.com=on

      [EAST_DOMAIN]

      dcEAST1.forcepoint.com=on

      dcEAST2.forcepoint.com=on