Skip to content

Troubleshooting

If you encounter any of the following issues or errors, SailPoint recommends that you follow the guidance provided below to resolve the error before contacting SailPoint Support.

For issues or errors that are not addressed in this connector guide, refer to the following resources for troubleshooting information:

IQService: Unspecified Error

The following error message displays for any Windows Local application request:

Error returned from IQService:Unspecified Error

Resolution - Perform the following:

  1. Ensure that the managed system is up and accessible from IQService host.
  2. Ensure that the Username and Password provided in application configuration are correct.

  3. If the managed system is in a workgroup, the Guest Only option for Sharing and security model for local accounts in the local policy forces all incoming network file sharing connections to authenticate as Guest.

    To resolve this problem, complete the following:

    1. On the Windows Start menu, go to Start > Control Panel > Administrative Tools > Local Security Settings.
    2. In the left pane, expand Local Policies > Security options.
    3. In the right pane, double-click Network access: Sharing and security model for local accounts.
    4. Select Classic - local users authenticate as themselves and select OK.

  4. If the managed system is Windows Server 2003 Service Pack 2, then some Windows updates are missing from the system. Turn on Windows updates and install the latest updates.

  5. Ensure that exception for File and Printer Sharing in windows firewall is enabled.
  6. If the problem persists, restart IQService.

IQService returns "The network path was not found"

When the Remote registry service is not started on the Windows computer, the following error message displays:

Error returned from IQService: The network path was not found

Resolution - Ensure that Windows Service named, Remote Registry Service is started on the Windows managed system.

Access Denied Error

Provisioning operation fails with the following error when User Account Control (UAC) is enabled:

Access Denied

Resolution - Use one of the following options:

  • Turn off the user Account Control for Microsoft Windows Vista or later, by completing the following:

    1. For Microsoft Windows Vista, go to Control Panel > User Accounts > Turn User Account Control and change it to Off.
    2. For Microsoft Windows 7 onwards, go to Control Panel > User Accounts > User Accounts > Change User Account Control Settings, and set it to Never Notify.

  • For more granular control, without disabling the User Account Control, add the following entry in the Registry Editor with a key value of 1:

    HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\LocalAccountTokenFilterPolicy

Users/Groups are not aggregated after User/Entitlement aggregation process.

Aggregation is getting successfully completed with 0 objects.

Resolution - Perform the following on your Windows Local managed system.

  1. Go to the group policy Computer Configuration > Windows Settings > Security Settings > Local Policies > Security Options > Network access: Restrict clients allowed to make remote calls to SAM.
  2. Select Edit Security to configure the Security descriptor:.
  3. Add Administrators in Group or user names: if it is not already listed (this is the default).
  4. Select Administrators in Group or user names:.
  5. Select Allow for Remote Access in Permissions for Administrators.
  6. Select OK.
  7. The Security descriptor: must be populated with O:BAG:BAD:(A;;RC;;;BA) for the policy to be enforced.

Documentation Feedback

Feedback is provided as an informational resource only and does not form part of SailPoint’s official product documentation. SailPoint does not warrant or make any guarantees about the feedback (including without limitation as to its accuracy, relevance, or reliability). All feedback is subject to the terms set forth at https://developer.sailpoint.com/discuss/tos.