Discover Scan Failing with "System error 1312"

Products

• Data Loss Prevention Network Discover

Issue/Introduction

FileReader0.log shows:

WARNING: Unexpected Result: MountPath = \\<EnforceServerHostname>\My Documents 
Standard Output: 
C:\Program Files\Symantec\DataLossPrevention\DetectionServer\<version>\Protect\bin>net use m: "\\EnforceServerHostname\My Documents" <PASSWORD> /user:Administrator /persistent:no 
Standard Error: System error 1312 has occurred.
A specified logon session does not exist. It may already have been terminated.

 

Cause

1. This may be due to a local security policy "Network access: Do not allow storage of passwords and credentials for network authentication."
2. Check the Symantec DLP services to see if they are running as local_system rather than the correct "SymantecDLP" service account.  This can cause the scan to not mount properly.

Resolution

First the first cause listed above, 

1. Open the Windows Local Group Policy Editor
2. Select Security Settings > Local Policies > Security Options.
3. Find and enable the Network access: Do not allow storage of passwords and credentials for network authentication policy

Check the SymantecDLPDetectionServer service to see if they are running as local_system rather than the correct "SymantecDLP" service account.  This can cause the scan to not mount properly.

If the scan is not mounting properly, take the following steps to correct this issue:

1. Create the "SymantecDLP" user if needed.
2. Associate the SymantecDLPDetectionServer with this user.
3. In a cmd window "run as" the "SymantecDLP" user to be able to run the cmd:
   
   C:\Program Files\Symantec\DataLossPrevention\DetectionServer\<version>\Protect\bin>net use m: "\\<HOST>\My Documents" <PASSWORD> /user:Administrator /persistent:no

 

Additional Information

In case the above workarounds fail, the other option is to check with whoever manages storage and use the full hostname of the server.