Active Scanning problem

[lundgard]

Hi,

I get the following error after enablement of active scanning for our Active Directory:

--
23.04.2009 15:58:15: domain.local dc01.domain.local The time limit for this request was exceeded.

at System.DirectoryServices.SearchResultCollection.ResultsEnumerator.MoveNext()
at LansweeperService.mdlActivescanning.ActiveScan()
--

We are running LANSweeper Premium on Windows Server 2008 Standard Edition (64-bit). The service account is not Domain Admin (not an option), but have read access to the entire Active Directory (all OUs) and local Administrator rights on all computers. We have OU filtering enabled for one test OU, containing computers.

Any ideas?

[lundgard]

The beta solved our Active Scanning issues. Still some errors regarding LDAP queries against random DCs, but we now can scan different OUs in AD.

This thread can be closed.

[lundgard]

After the upgrade I now get these errors:
--
24.04.2009 11:04:22: Database connection successful, starting up service

24.04.2009 11:04:24: LDAP://CN=NTDS Settings,CN=dc03,CN=Servers,CN=Site01,CN=Sites,CN=Configuration,DC=domain,DC=local No ServerReference value at System.Collections.CollectionBase.System.Collections.IList.get_Item(Int32 index)
at System.DirectoryServices.PropertyValueCollection.get_Item(Int32 index)
at LansweeperService.LS_ActiveDirectory.EnumerateDomainControllers(LS_Domain Mydomain)

24.04.2009 11:41:50: domain.local dc04 The server is not operational.

24.04.2009 11:59:08: domain.local dc05 The server is not operational.
--

I guess the dc04 and dc05 actually could have some issues, but we have 198 other working DCs out there. Why can't we set a spesific DC or AD Site for the LDAP queries?


The Active Scanning and OU filter is now actually working with the 3.5.1 beta , but I get the following scan error on some of the test clients:
--
Scan Error Time
Wmierror The RPC server is unavailable 0x800706BA (testclient01.domain.local, TESTCLIENT01, 10.40.26.100) 24.04.2009 11:40:58
Wmierror Cannot connect to DCOM port 135 : Firewalled? (TESTCLIENT01) 24.04.2009 11:40:58
--

Could be a local firewall here (as assumed in the log). Remote WMI test also fails with the following errors against the same test client:
--
Remote WMI test
-----------------------------------------------
\root\cimv2 Remote WMI access test FAILED
The RPC server is unavailable. (Exception from HRESULT: 0x800706BA)

Remote Registry test using WMI
-----------------------------------------------
\root\default Remote WMI access test FAILED
The RPC server is unavailable. (Exception from HRESULT: 0x800706BA)
--

Another test client is working fine:
--
Remote WMI test
-----------------------------------------------
Found: Microsoft® Windows Vista™ Business Service Pack 1
\root\cimv2 Remote WMI access test OK

Remote Registry test using WMI
-----------------------------------------------
Found: Windows Vista (TM) Business Service Pack 1
\root\default Remote WMI access test OK
--

I will follow up and let you know how it works. I really miss an option to select a DC or AD site for the LDAP queries performed by LANSweeper. Is this possible? If not - where can I send this feature request?

[Hemoco]

lundgard wrote:

I will follow up and let you know how it works. I really miss an option to select a DC or AD site for the LDAP queries performed by LANSweeper. Is this possible? If not - where can I send this feature request?

You can post it in the wishlist forum.
The problem is that the lastlogonfield for a computer is not replicated between the DC's in a domain.

[Hemoco]

Could you post your errorlog after you used the 3.5.1 beta please.

[lundgard]

My user is now premium.

We have 6000 users, 6000 client computers, 1000 servers and 200 DCs on many different location. The LANSweeper 3.5 Premium server is located on a subnet with access to all DCs, servers and client computers.

Will try the 3.5.1 beta now and let you know if it helps.

Today I have some other error messages in the error log (permissions?):

--
24.04.2009 09:29:14: domain.local dc02.domain.local The time limit for this request was exceeded.

at System.DirectoryServices.SearchResultCollection.ResultsEnumerator.MoveNext()
at LansweeperService.mdlActivescanning.ActiveScan()

24.04.2009 09:41:35: The server is not operational.

at System.DirectoryServices.DirectoryEntry.Bind(Boolean throwIfFail)
at System.DirectoryServices.DirectoryEntry.Bind()
at System.DirectoryServices.DirectoryEntry.get_AdsObject()
at System.DirectoryServices.DirectorySearcher.FindAll(Boolean findMoreThanOne)
at LansweeperService.mdlActivescanning.ActiveScan()

24.04.2009 09:41:35: domain.local dc01.domain.local Cannot access a disposed object.
Object name: 'SearchResultCollection'.
at System.DirectoryServices.SearchResultCollection.get_Handle()
at System.DirectoryServices.SearchResultCollection.ResultsEnumerator.MoveNext()
at LansweeperService.mdlActivescanning.ActiveScan()

24.04.2009 09:57:20: domain.local dc02.domain.local The time limit for this request was exceeded.

at System.DirectoryServices.SearchResultCollection.ResultsEnumerator.MoveNext()
at LansweeperService.mdlActivescanning.ActiveScan()

24.04.2009 09:59:49: DOMAIN\all$ Active directory computer lookup Name translation: Could not find the name or insufficient right to see name. (Exception from HRESULT: 0x80072116)

24.04.2009 10:12:35: domain.local dc02.domain.local The time limit for this request was exceeded.

at System.DirectoryServices.SearchResultCollection.ResultsEnumerator.MoveNext()
at LansweeperService.mdlActivescanning.ActiveScan()
--

[Hemoco]

Could you make yourself a premium user please, then I can move this to the premium group.

Please try the beta 3.5.1 service : http://www.lansweeper.com/forum/yaf_postst1514_Lansweeper-Service-351-update-1-beta.aspx
It fixes several active scanning issues.

Could you give some information about your AD (number of DC's, number of computers, ...)