Dirsync: Discovery Failure - "System.Runtime.InteropServices.COMException: Access is denied" (4369181)

Dirsync: Discovery Failure - "System.Runtime.InteropServices.COMException: Access is denied"

Discovery: Error retrieving child OUs for <Value>. "System.Runtime.InteropServices.COMException (0x80005000): Unknown error (0x80005000)
at System.DirectoryServices.DirectoryEntry.Bind(Boolean throwIfFail)
at System.DirectoryServices.DirectoryEntry.Bind()
at System.DirectoryServices.DirectoryEntry.get_AdsObject()
at System.DirectoryServices.DirectorySearcher.FindAll(Boolean findMoreThanOne)
at CDS.Model.ActiveDirectory.GetImmediateChildren(Domain domain, OrganizationalUnit parentOu, String server, Guid changeStamp)
at CDS.Model.ActiveDirectory.GetImmediateChildren(Domain domain, List`1 parentOus, String server, Guid changeStamp)"

---> System.Runtime.InteropServices.COMException: Access is denied.
 
   at System.DirectoryServices.DirectoryEntry.Bind(Boolean throwIfFail)
   at System.DirectoryServices.ActiveDirectory.DirectoryContext.IsContextValid(DirectoryContext context, DirectoryContextType contextType)
   --- End of inner exception stack trace ---
   at System.DirectoryServices.ActiveDirectory.DirectoryContext.IsContextValid(DirectoryContext context, DirectoryContextType contextType)
   at System.DirectoryServices.ActiveDirectory.DirectoryContext.isServer()
   at System.DirectoryServices.ActiveDirectory.ActiveDirectorySchema.GetSchema(DirectoryContext context)
   at CDS.Model.ActiveDirectory.DiscoverSchemaAttributes()
   at CDS.Model.ActiveDirectory.Discover(DomainController gcs)
   at CDS.Model.ActiveDirectory.Discover(CancellationToken cancelToken)
   at CDS.Model.DiscoveryJob.Run(IWebServiceFactory webServiceFactory, CancellationToken cancellationToken)
   at CDS.Model.Job.Execute(IWebServiceFactory webServiceFactory, CancellationToken cancellationToken)
 

One ore more of the following could be causing this error:
1. The Domain Controller does not meet minimum product requirements
2. Issue with the Domain Controller
3. Service account does not meet meet minimum product requirements

 

For 1 and 2 select a different Domain Controller in the Dirsync Environment Settings configuration. Confirm this new DC meets product requirements.

For 3. Confirm the service account meets product requirements. Is a part of the domain admin role or built-in admin role. Review the Domain Controller Security Event Viewer log for login errors and work with the Active Directory Administrator to ensure this account has the correct permissions.