Error "Programatic error! Requested scope [domain] generated scope [null]" when creating Domain Cache in CCS

Products

• Control Compliance Suite Exchange

Issue/Introduction

In CCS, when running a data-collection or CER job on some assets, the job errors out with the error "Programatic error! Requested scope [domain] generated scope [null]" in the CCS console -> jobs -> messages tab.                       

Programatic error! Requested scope [domain] generated scope [null]                         

Cause

That error occurs when the credential used by CCS is no longer valid.  The reasons may included.

• User account has been locked out.
• User account is new and requires password to be changed on first logon.
• User account password has been changed, but CCS has not been updated to reflect the changed password.
• User account does not have read access over the RootDSE objects of Active Directory to be able to create the Domain Cache.

Resolution

Verify that the user account that CCS uses to create Domain Cache has read access over the RootDSE objects of Active Directory, and that is fully functional and not locked out and does not require the password to be changed on the first login.