TS collection failed warning

Email It to Me Print this Page
Symptoms Active Directory Change Reporter includes the “Failed to process DC: %domain controller name% The error is: TS collection failed: Can't open output file: C:\Windows\ADCR_Agent\%domain contoller name%.ts. Permission denied” warning for Windows Server 2008 domain controllers in summary reports.
 
Cause  *.ts files are being used by Active Directory Change Reporter to collect time stamps of when Active Directory objects were changed, these files are being created by the Active Directory Change Reporter agent, which is running under the Local System account but being collected by the main Active Directory Change Reporter process which is running under the specified service account. The error appear when User Account Control (UAC) (http://technet.microsoft.com/en-us/library/cc709691(v=ws.10).aspx) considers this difference as a potential security issue and blocks access to the *.ts file for the service account Active Directory Change Reporter is being run under.     
Resolution To resolve this issue, you need to disable User Account Control (UAC) on the problematic domain controller and delete the *.ts  file Active Directory Change Report was able to access:
 
  1. Log on the problematic domain controller
  2. Disable User Account Control (UAC)
  • Click Start, and then click Control Panel.
  • In Control Panel, click User Accounts.
  • In the User Accounts window, click User Accounts.
  • In the User Accounts tasks window, click Turn User Account Control on or off.
  • If UAC is currently configured in Admin Approval Mode, then the User Account Control message appears. Click Continue.
  • Clear the Use User Account Control (UAC) to help protect your computer check box, and then click OK.
  • Restart  domain controller
3. Once the domain controller is restarted,  log onto it and delete the *.ts  file Active Directory Change Report was able to access:
  • Navigate to C:\Windows\ADCR_Agent\
  • Fide the file listed in the error (%domain contoller name%.ts) and delete it
  • Do not enable User Account Control (UAC) back.
(*) Netwrix Auditor replaces former Change Reporter products
Was this information helpful?