Control Compliance Suite (CCS)
CCS Checks are returning UNKNOWN
Checked the drive shares and the client has disabled Default Shares such as ADMIN$/C$/D$ for all servers
Release : CCS Infra Release 12.6.1
CCS Requires the default administrative shares to be enabled.
As per Microsoft, these shares should be available.
Please reference the following Microsoft article.
Overview of problems that may occur when administrative shares are missing
Here are the kind of errors that will be found in the Verbose log files on the CCS Manager or Agent. Such as the DCModules.log on the Agent.
16 | 02 | 08/11/23 | 10:26:58 | BVNTVolume.cpp | 241 | DCModule.exe | 2184 | 2948 | Exception in BVNTVolume::QueryInfo() with code:00000906
16 | 02 | 08/11/23 | 10:26:58 | BVNTVolume.cpp | 291 | DCModule.exe | 2184 | 2948 | Exception in BVNTVolume::QueryVolumeInfo() with code:00000043
16 | 02 | 08/11/23 | 10:26:58 | registry.cpp | 417 | DCModule.exe | 2184 | 2948 | Exception in BVNTRegistry::GetValue() with code:00000002
16 | 02 | 08/11/23 | 10:26:58 | BVNTVolumeEnumerator.cpp | 257 | DCModule.exe | 2184 | 2948 | BVNTVolumeEnumerator - ProcessLocalComputer - Exception caught: The network name cannot be found. (Error Code: 67)
16 | 02 | 08/11/23 | 10:26:58 | registry.cpp | 417 | DCModule.exe | 2184 | 2948 | Exception in BVNTRegistry::GetValue() with code:00000002
16 | 02 | 08/11/23 | 10:26:58 | BVNTVolumeEnumerator.cpp | 488 | DCModule.exe | 2184 | 2948 | BVNTVolumeEnumerator::Enumerate - Failed to find any volumes on target computer "<\\hostname>". Throwing exception.
30 | 01 | 08/11/23 | 10:26:58 | ErrorLog.cpp | 936 | DCModule.exe | 2184 | 2948 | Entering ReadListProcessInterfaceImpl::AddExceptionFile()
30 | 02 | 08/11/23 | 10:26:58 | ProcessInterface.cpp | 174 | DCModule.exe | 2184 | 2948 | ReadListProcessInterfaceImpl::AddExceptionFile() - 1 - <message level="3" target="<hostname>"><desc><![CDATA[Enumerating all of the volumes on <hostname> - Unable to locate any volumes on target computer "<hostname>" for the following reason(s):
Unable to create volume object for drive "C:" on target computer "<\\hostname>"; Reason: The network name cannot be found. (Error Code: 67)
Unable to create volume object for drive "D:" on target computer "<\\hostname>"; Reason: The network name cannot be found. (Error Code: 67)
Unable to create volume object for drive "E:" on target computer "<\\hostname>"; Reason: The network name cannot be found. (Error Code: 67)
Unable to create volume object for drive "F:" on target computer "<\\hostname>"; Reason: The network name cannot be found. (Error Code: 67)
The following admin share detection rules were applied: Use default admin share. Auto discover admin share. To modify administrative share selection rules, use the Administrative Share Selections configuration item for bv-Control for Windows. - Unable to identify an administrative share to query volume information.]]></desc><asset type="WNT.MACHINE"><DOMAINWORKGROUPNAME> <![CDATA[<domain>]]></DOMAINWORKGROUPNAME> <RELATIVENAME> <![CDATA[<hostname>]]></RELATIVENAME> </asset><internalerror><![CDATA[0]]></internalerror></message>
30 | 01 | 08/11/23 | 10:26:58 | ErrorLog.cpp | 941 | DCModule.exe | 2184 | 2948 | Exiting ReadListProcessInterfaceImpl::AddExceptionFile()
17 | 01 | 08/11/23 | 10:26:58 | BVNTProcessQuery.cpp | 3685 | DCModule.exe | 2184 | 2948 | BVNTProcessQuery::AddErrorRecord(<hostname>,3489539872,Unable to locate any volumes on target computer "<hostname>" for the following reason(s):
Unable to create volume object for drive "C:" on target computer "<\\hostname>"; Reason: The network name cannot be found. (Error Code: 67)
Unable to create volume object for drive "D:" on target computer "<\\hostname>"; Reason: The network name cannot be found. (Error Code: 67)
Unable to create volume object for drive "E:" on target computer "<\\hostname>"; Reason: The network name cannot be found. (Error Code: 67)
Unable to create volume object for drive "F:" on target computer "<\\hostname>"; Reason: The network name cannot be found. (Error Code: 67)
The following admin share detection rules were applied: Use default admin share. Auto discover admin share. To modify administrative share selection rules, use the Administrative Share Selections configuration item for bv-Control for Windows.,Enumerating all of the volumes on <hostname>,3)