Agent groups or attributes not updating

Products

• Data Loss Prevention Endpoint Prevent

Issue/Introduction

Despite relevant agent tasks completing an agent's AD attributes is not updating or it is not changing agent groups. 

Environment

DLP 16.1 and later 

Cause

Checking the SymantecDLPEnforceConntector logs we observe the following error 
SEVERE: Exception while getting dataReader for file <file name> in folder Account-storage/EnforceSlot-uuid/AGENT_STATUS_ATTRIBUTE.
com.symantec.dlp.storageandnotification.exceptions.RecoverableStorageSecurityException: Cannot decrypt file, no file encryption key found.

Resolution

Delete all files under the \ProgramData\Symantec\DataLossPrevention\DetectionServer\Account-storage\EnforceSlot-uuid\AGENT_STATUS_ATTRIBUTE folder (Note: These are likely listed in the error present in the SymantecDLPEnforceConnector log file)

Restart the Symantec DLP Enforce Connector Service. 

Additional Information

This error can also occur in other folders underneath the EnforceSlot-uuid/<folder> 
This folders are referred to as topic folders and if a crypto key goes missing it can disrupt communication on this topic.