Access denied error on one domain controller
We just deployed AD Audit Plus, and are seeing one issue with event collection. We are monitoring several domains without issue, however, our parent level domain has three DCs that we want to monitor. I have specified credentials for the domain that tie to an account that I've elevated as far as the domain and enterprise admin groups. AD Audit Plus is able to grab events from 2 of the 3 DCs with no issues using this account, but the third reports the following error when we click the run now button:
java.lang.Exception: Access is denied - Error Code : 80070005
I have tried updating the audit policy using the refresh icon as suggested by the on screen help, which did not help. I saw several other Adventnet products referencing this error. One forum post suggested it was a WMI collection issue, so I ran the wmiadap /f command which also had no effect. Finally, I tried rebooting that server, which also did not help. I opened AD Users & Computers on the DC that's having issues and verified that it has been getting AD replication and sees the user account and the groups it's in.
Any ideas what might be causing this? We have 40 or so other DCs in and working with no problems.
New to ADSelfService Plus?