Banks, credit unions, insurance companies,
TS collection failed warning
|Symptoms||Active Directory Change Reporter includes the “Failed to process DC: %domain controller name% The error is: TS collection failed: Can't open output file: C:\Windows\ADCR_Agent\%domain contoller name%.ts. Permission denied” warning for Windows Server 2008 domain controllers in summary reports.
|Cause||*.ts files are being used by Active Directory Change Reporter to collect time stamps of when Active Directory objects were changed, these files are being created by the Active Directory Change Reporter agent, which is running under the Local System account but being collected by the main Active Directory Change Reporter process which is running under the specified service account. The error appear when User Account Control (UAC) (http://technet.microsoft.com/en-us/library/cc709691(v=ws.10).aspx) considers this difference as a potential security issue and blocks access to the *.ts file for the service account Active Directory Change Reporter is being run under.|
|Resolution||To resolve this issue, you need to disable User Account Control (UAC) on the problematic domain controller and delete the *.ts file Active Directory Change Report was able to access:
3. Once the domain controller is restarted, log onto it and delete the *.ts file Active Directory Change Report was able to access: