Active Directory workload collection may fail with an error in the Hybrid Agent log file, "An operations error occurred" while processing users or groups (4378778)

An Active Directory workload collection may fail due to error attempting to process users or groups. This may occur if the collection is unable to query users or group objects should there be a deny permissions in place or general lack of read permission to query user or group objects via LDAP operation.

Such errors may be discovered in the ...\bin\agentservice.txt log file:

Users:
An unexpected error occurred while attempting to get the Users. Canceling object collection. An operations error occurred.    
at System.DirectoryServices.SearchResultCollection.ResultsEnumerator.MoveNext()  
at Quest.OnDemand.JRS.Services.ADCollector.EntitiesCollector.UsersCollector.GetUsers(String rootADPath, String fqdn, List\nnnnnn groupsInfo, CancellationToken cancellationToken)

Groups:
An unexpected error occurred while attempting to get the Groups. Canceling objects collection. An operations error occurred.    
at System.DirectoryServices.SearchResultCollection.ResultsEnumerator.MoveNext()  
at Quest.OnDemand.JRS.Services.ADCollector.EntitiesCollector.GroupsCollector.GetGroups(String rootADPath, String fqdn, List\nnnnnn groupsInfo, CancellationToken cancellationToken)

Verify the service account running the On-Premises Hybrid Agent has read rights to query Active Directory users and groups.

Note: There may be other less known situations which could lead to this error. Verify the primary resolution described here as a troubleshooting step.

Enhancement request 546901 has been logged for consideration in a future release.