The user specified in the active connection profile is not a member of either the ChangeAuditor Administrators or ChangeAuditor Operators Roles. (4243335)

The following message is presented when trying to log in to the Change Auditor client:

"The user specified in the active connection profile is not a member of either the ChangeAuditor Administrators or ChangeAuditor Operators roles."

The groups are not found in Active Directory.

OR

"The server has rejected the client credentials"

OR

"The user does not have the required permissions to perform the requested operation"

The following groups do not exist in ADUC or the customer has modified the group name and/or moved the default location for the groups.

ChangeAuditor Administrators - [ChangeAuditor Installation name],

ChangeAuditor Operators - [ChangeAuditor Installation name],

ChangeAuditor Web Shared Overview Users - [ChangeAuditor Installation name] 

These groups are normally created during installation if the user running the installation has the proper access to Active Directory. They are required for Role Based access to the features of Change Auditor. You need to add the users to the above groups that need to access ChangeAuditor.

*Note: if the groups are present they may not be added to the Authorization manager file*

..\Program Files\Quest\ChangeAuditor\Service\AzManXmlStore.xml

If the Security Groups do not exists as follows and have not been renamed and/or moved to a different OU

• ChangeAuditor Administrators - [ChangeAuditor Installation name]
• ChangeAuditor Operators - [ChangeAuditor Installation name]
• ChangeAuditor Web Shared Overview Users - [ChangeAuditor Installation name] 

Then create the group manually using their respective names as shown above and a suffix of the Change Auditor Installation name

E.g. ChangeAuditor Operators - DEFAULT

If the groups already exist in ADUC, then check the following

1. On the Coordinator server open MMC
2. Click File | Add/remove snapin
3. Select Authorization manager and click Add
4. Click OK
5. Right click Authorization Manger and select Open Authorization Store
6. Click Browse and browse to ..\Program Files\Quest\ChangeAuditor\Service\AzManXmlStore.xml
7. Click Open
8. Click OK
9. Expand Authorization Manager | AzManXmlStore.xml | Quest ChangeAuditor | Role Assignments
10. Select the Administrator Role and verify if the the ChangeAuditor Administrators - [ChangeAuditor Installation name] group name is listed
11. If the group is not present, or is not the correct group, right click Administrator Role and select Assign Users and Groups | From Windows and Active Directory
12.  Select the ChagneAuditor Administrators - [ChangeAuditor Installation name] group from the object picker and click OK
13. Repeat steps 10-12 for the Operators Role (selecting the ChangeAuditor Operators - [ChangeAuditor Installation name] group) and the Web Client Shared Overviews Role (selecting the ChangeAuditor Web Shared Overview Users - [ChangeAuditor Installation name] group
14. logoff the client machine and back on and now the Client access should work normally

If there is still an issue after performing all of the steps above, try restarting the Coordinator service and restart IIS.