# Troubleshooting

If you encounter any of the following issues or errors, SailPoint recommends that you follow the guidance provided below to resolve the error before contacting SailPoint Support.

For issues or errors that are not addressed in this connector guide, refer to the following resources for troubleshooting information:

- [SailPoint Identity Services Documentation](<https://documentation.sailpoint.com/saas/help/index.html>)
- [SailPoint Support Knowledge Base](<https://support.sailpoint.com/csm?id=kb_view2&amp;kb_id=05ff44289f011200550bf7b6077fcfa3>)
- [SailPoint Developer Community](<https://developer.sailpoint.com/>)

## IQService: Unspecified Error

The following error message displays for any Windows Local application request:

```text
Error returned from IQService:Unspecified Error
```

**Resolution** - Perform the following:

1. Ensure that the managed system is up and accessible from IQService host.
2. Ensure that the Username and Password provided in application configuration are correct.
3. If the managed system is in a workgroup, the **Guest Only** option for **Sharing and security model for local accounts** in the local policy forces all incoming network file sharing connections to authenticate as **Guest**.

   To resolve this problem, complete the following:

   1. On the Windows Start menu, go to **Start \> Control Panel \> Administrative Tools \> Local Security Settings**.
   2. In the left pane, expand **Local Policies \> Security** options.
   3. In the right pane, double-click **Network access: Sharing and security model for local accounts**.
   4. Select **Classic - local users authenticate as themselves** and select **OK**.
4. If the managed system is Windows Server 2003 Service Pack 2, then some Windows updates are missing from the system. Turn on Windows updates and install the latest updates.
5. Ensure that exception for **File and Printer Sharing** in windows firewall is enabled.
6. If the problem persists, restart IQService.

## IQService returns "The network path was not found"

When the Remote registry service is not started on the Windows computer, the following error message displays:

```text
Error returned from IQService: The network path was not found
```

**Resolution** - Ensure that Windows Service named, **Remote Registry Service** is started on the Windows managed system.

## Access Denied Error

Provisioning operation fails with the following error when User Account Control (UAC) is enabled:

```text
Access Denied
```

**Resolution** - Use one of the following options:

- **Turn off the user Account Control** for Microsoft Windows Vista or later, by completing the following:

  1. For Microsoft Windows Vista, go to **Control Panel \> User Accounts \> Turn User Account Control** and change it to **Off**.
  2. For Microsoft Windows 7 onwards, go to **Control Panel \> User Accounts \> User Accounts \> Change User Account Control Settings**, and set it to **Never Notify**.
- For more granular control, without disabling the User Account Control, add the following entry in the **Registry Editor** with a key value of `1`:

  ```text
  HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\LocalAccountTokenFilterPolicy
  ```

## Users/Groups are not aggregated after User/Entitlement aggregation process.

Aggregation is getting successfully completed with 0 objects.

**Resolution** - Perform the following on your Windows Local managed system.

1. Go to the group policy **Computer Configuration** \> **Windows Settings** \> **Security Settings** \> **Local Policies** \> **Security Options** \> **Network access:** Restrict clients allowed to make remote calls to SAM.
2. Select **Edit Security** to configure the **Security descriptor:**.
3. Add **Administrators** in **Group or user names:** if it is not already listed (this is the default).
4. Select **Administrators** in **Group or user names:**.
5. Select **Allow** for Remote Access in Permissions for **Administrators**.
6. Select **OK**.
7. The **Security descriptor:** must be populated with `O:BAG:BAD:(A;;RC;;;BA)` for the policy to be enforced.