Return
-
Title
Error: "Ldap failed (Insufficient Rights) writing DSS status" -
Description
A Defender Security Server object has been created in AD, and the DSS server installed. However, the version shows as "Unknown (5.8.0.0 required)" and the Status Inactive
The DSS logs shows the error:
Error: "Ldap failed (Insufficient Rights) writing DSS status" -
Cause
The service account credentials entered on the Defender Security Server Configuration does not have the permissions to update the DSS server object. -
Resolution
Use the Defender Delegation Wizard to delegate the "Defender Security Server" permissions to the account used. More information on the delegation wizard is available below:
https://support.oneidentity.com/technical-documents/defender/6.1/administration-guide/45#TOPIC-1615910