"Failed to create home directory rc: 5 - Access Denied" when trying to create a home directory on a DFS share through the Active Directory connector.

Products

• CA Directory
• CA Identity Manager
• CA Identity Governance
• CA Identity Portal
• CA Risk Analytics
• CA Secure Cloud SaaS - Arcot A-OK (WebFort)
• CLOUDMINDER ADVANCED AUTHENTICATION
• CA Secure Cloud SaaS - Advanced Authentication
• CA Secure Cloud SaaS - Identity Management
• CA Secure Cloud SaaS - Single Sign On
• CA Security Command Center
• CA Data Protection (DataMinder)
• CA User Activity Reporting

Issue/Introduction

Description:

When a user's home directory is set to a DFS (distributed file system) location, the transaction fails with the error " Connector server modify failed: Failed to create home directory rc: 5 - Access is denied."

Solution:

DFS requires different access than non-DFS shares. The fix is to edit the service account used to run the IM_CCS service and use a valid user with the correct permissions. This user would need to have administrative permissions at the OS level and also be a local admin.

In services.msc:

• Stop the IM_CCS service.
• Right click the service, select properties.
• Click the logon tab.
• Change the Logon from 'Local System Account' to the specific user account of a local admin with correct permissions on the domain as well.
• Save the changes and restart the service.

Environment

Release: CAPUEL99000-12.5-Identity Manager-Blended upgrade to Identity &-Access Mgmt Ente
Component: