Cb Protection: “Unable to Access Rules XML” Error

Products

• Carbon Black App Control (formerly Cb Protection)

Issue/Introduction

• "Unable to access rules XML" Error when accessing Rules > Policies > Mappings tab within console
• Cb Protection Server service crashes while trying to access mappings (seen in Event Viewer - System logs)

Environment

Cb Protection Console: All Supported Versions

Cause

A group or OU that a policy mapping points to, no longer exists within Active Directory.

Resolution

1. Login to the Cb Protection server.
2. Open Services > Stop the CB Protection Server service
3. Navigate to C:\Program Files (x86)\Bit9\Parity Server\scripts.
4. Open the 'adrules.xml' with Notepad
5. Remove any mappings that are no longer applicable and save the file
6. Open SQL Mgmt Studio and run the following query to clear the DB copy of the file:

   use das; delete dbo.file_streams where name = 'adrules.xml'

7. Start the CB Protection Server service

Additional Information

Carbon Black has identified this issue internally as EP-4090