Returning UNKNOWN for verifying drive format and shared folders during a CCS data collection

Products

• Control Compliance Suite Standards Server
• Control Compliance Suite
• Control Compliance Suite Standards Module

Issue/Introduction

Control Compliance Suite (CCS)

CCS Checks are returning UNKNOWN

Checked the drive shares and the client has disabled Default Shares such as ADMIN$/C$/D$ for all servers

Environment

Release : CCS Infra Release 12.6.1

Cause

CCS Requires the default administrative shares to be enabled.

Resolution

As per Microsoft, these shares should be available. 

Please reference the following Microsoft article.

Overview of problems that may occur when administrative shares are missing

Additional Information

Here are the kind of errors that will be found in the Verbose log files on the CCS Manager or Agent. Such as the DCModules.log on the Agent.

 

16 | 02 | 08/11/23 | 10:26:58 | BVNTVolume.cpp | 241 | DCModule.exe | 2184 | 2948 | Exception in BVNTVolume::QueryInfo() with code:00000906
16 | 02 | 08/11/23 | 10:26:58 | BVNTVolume.cpp | 291 | DCModule.exe | 2184 | 2948 | Exception in BVNTVolume::QueryVolumeInfo() with code:00000043
16 | 02 | 08/11/23 | 10:26:58 | registry.cpp | 417 | DCModule.exe | 2184 | 2948 | Exception in BVNTRegistry::GetValue() with code:00000002
16 | 02 | 08/11/23 | 10:26:58 | BVNTVolumeEnumerator.cpp | 257 | DCModule.exe | 2184 | 2948 | BVNTVolumeEnumerator - ProcessLocalComputer - Exception caught: The network name cannot be found. (Error Code: 67)
16 | 02 | 08/11/23 | 10:26:58 | registry.cpp | 417 | DCModule.exe | 2184 | 2948 | Exception in BVNTRegistry::GetValue() with code:00000002
16 | 02 | 08/11/23 | 10:26:58 | BVNTVolumeEnumerator.cpp | 488 | DCModule.exe | 2184 | 2948 | BVNTVolumeEnumerator::Enumerate - Failed to find any volumes on target computer "<\\hostname>". Throwing exception.
30 | 01 | 08/11/23 | 10:26:58 | ErrorLog.cpp | 936 | DCModule.exe | 2184 | 2948 | Entering ReadListProcessInterfaceImpl::AddExceptionFile()
30 | 02 | 08/11/23 | 10:26:58 | ProcessInterface.cpp | 174 | DCModule.exe | 2184 | 2948 | ReadListProcessInterfaceImpl::AddExceptionFile() - 1 - <message level="3" target="<hostname>"><desc><![CDATA[Enumerating all of the volumes on <hostname> - Unable to locate any volumes on target computer "<hostname>" for the following reason(s):
Unable to create volume object for drive "C:" on target computer "<\\hostname>"; Reason: The network name cannot be found. (Error Code: 67)
Unable to create volume object for drive "D:" on target computer "<\\hostname>"; Reason: The network name cannot be found. (Error Code: 67)
Unable to create volume object for drive "E:" on target computer "<\\hostname>"; Reason: The network name cannot be found. (Error Code: 67)
Unable to create volume object for drive "F:" on target computer "<\\hostname>"; Reason: The network name cannot be found. (Error Code: 67)
The following admin share detection rules were applied: Use default admin share. Auto discover admin share. To modify administrative share selection rules, use the Administrative Share Selections configuration item for bv-Control for Windows. - Unable to identify an administrative share to query volume information.]]></desc><asset type="WNT.MACHINE"><DOMAINWORKGROUPNAME> <![CDATA[<domain>]]></DOMAINWORKGROUPNAME> <RELATIVENAME> <![CDATA[<hostname>]]></RELATIVENAME> </asset><internalerror><![CDATA[0]]></internalerror></message>
30 | 01 | 08/11/23 | 10:26:58 | ErrorLog.cpp | 941 | DCModule.exe | 2184 | 2948 | Exiting ReadListProcessInterfaceImpl::AddExceptionFile()
17 | 01 | 08/11/23 | 10:26:58 | BVNTProcessQuery.cpp | 3685 | DCModule.exe | 2184 | 2948 | BVNTProcessQuery::AddErrorRecord(<hostname>,3489539872,Unable to locate any volumes on target computer "<hostname>" for the following reason(s):
Unable to create volume object for drive "C:" on target computer "<\\hostname>"; Reason: The network name cannot be found. (Error Code: 67)
Unable to create volume object for drive "D:" on target computer "<\\hostname>"; Reason: The network name cannot be found. (Error Code: 67)
Unable to create volume object for drive "E:" on target computer "<\\hostname>"; Reason: The network name cannot be found. (Error Code: 67)
Unable to create volume object for drive "F:" on target computer "<\\hostname>"; Reason: The network name cannot be found. (Error Code: 67)
The following admin share detection rules were applied: Use default admin share. Auto discover admin share. To modify administrative share selection rules, use the Administrative Share Selections configuration item for bv-Control for Windows.,Enumerating all of the volumes on <hostname>,3)