[Password: Days To Expiration] field not giving correct data

Products

• Control Compliance Suite Standards Server

Issue/Introduction

When running a query against the Windows:Users data source with the field "Password: Days to Expiration" we are getting [Insufficient Rights]" against the Windows Domain.

Environment

Release : CCS 12.5.2 - 12.6.1

Cause

This happens due to the local security policy on the domain controller(s) "Network Access: Restrict clients allowed to make remote calls to SAM" being configured.
This restricts any but administrators from accessing this data.

Resolution

Either add the user configured for data collection to this local security policy or add them to the local Administrators group.
Or you can install a CCS Agent and modify the Agent configuration to only run in the process context.