When deploying QCS there is one (or some) domain(s) which is/are not accessible. Reasons could be different like insufficient rights or firewall. If a domain cannot be contacted then QCS fails to start with this error:
"![2009/11/04 16:43:46.911] (2) Warning :<Active Directory Manager> (30922) Failed to retrieve information about the following domains: DC=child,DC=root,DC=com (Cannot contact the LDAP server.)"
What can be done?
QCS needs access to all domains in the environment in order to be able to enumerate them.
The only possible workaround is this one:
The service account used by QCS should have denied access to this particular domain. To configure this do the following:
- Stop QCS services
- Open ADSIEdit and select e.g. N=Partitions,CN=Configuration,DC=<domain>,DC=<domain>
- Open the properties and ensure systemFlags is set to 3. See screenshot 1.
- Then switch to tab security and add the QCS Service Account and deny full control. See screenshot 2.
- To verify which account you are using as QCS General account see screenshot 3.
- Start the services and in case the error re-appears then you will have to uninstall QCS and install it again, this is unfortunately the only option.
Usually a fresh installation is required, because the domain is discovered during the installation and during initial (first) enumeration of the environment, later this data is already present in the internal DB and only a new installation will help.
