Warning, Failed to audit session Failed to find user account details:404

  • 7012628
  • 18-Jun-2013
  • 18-Jun-2013

Environment

NetIQ Privileged User Manager 2.3.1
NetIQ Privileged User Manager 2.3.2

Situation

Warning, Failed to audit session Failed to find user account details:404
Error, Terminating connection as Audit cannnot be started from xxx.xxx.xxx.xxx session guid

Resolution

Verify the Account Domain was named the domain name (if it's Active Directory) or the hostname, if it's a standalone host. 

AD Example: 
If my domain is called pumdomain.com, when creating my Account Domain within Command Control for this Active Directory domain, I would call my Account Domain 'PUMDOMAIN'. 

Standalone host Example:
If my standalone windows host name was HOST98, when creating my Account Domain for a standalone Windows host, I would name my Account Domain 'HOST98'



Additional Information

If you are unsure what your hostname of Domain are, you can use a Microsoft Utility called PsGetSid v1.33 
http://technet.microsoft.com/en-us/sysinternals/bb897417.aspx

Here is the output:

C:\Users\Administrator\Downloads\PSTools>PsGetsid.exe Administrator

PsGetSid v1.44 - Translates SIDs to names and vice versa
Copyright (C) 1999-2008 Mark Russinovich
Sysinternals - www.sysinternals.com

SID for HOST98\Administrator:
S-1-5-21-232814113-2967873993-2770056070-500

In this case, 'HOST98' would be the appropriate name to use as the Account Domain name.