Active Directory Domain settings - Failed to Regeneate AI for Domain

Products

• Endpoint Security

Issue/Introduction

Unable to use the Threat Defense for AD policy as topology status is successful but failed to regenerate AI for Domain with error "Failed to regenerate AI for Domain".

Environment

Symantec Endpoint Security and Active directory

Cause

Exception while trying to retrieve domain's SID as the user doesn't have enough privileges to collect domain SID during topology run (or) the outdated trust relationship to dead/removed AD domains.

Resolution

This is user permission issue , the System.Runtime.InteropServices.COMException (0x8007203B): A local error has occurred. Verify if the AD structure has a trusted relationship with other AD to which the gateway user has read permission.

 

Additional Information

CRE-16651