Active Directory Users Inspector Broken in 9.5.2

Usage and Config Platform
1

Hello,

I’m seeing some interesting behavior across all of my Windows agents (haven’t checked Mac OS).

In 9.2.7:

Q: names of logged on users
A: weaston-ou
T: 0.019 ms

Q: names of user of logged on users
A: weaston-ou
T: 0.026 ms

Q: distinguished name of active directory users of users of logged on users
A: CN=William S. Easton Admin,OU=Admin Accounts,OU=Users,OU=Managed,DC=ad,DC=domain,DC=tld
T: 0.031 ms

Q: name of active directory users of users of logged on users
A: weaston-ou
T: 0.028 ms

In 9.5.2:

Q: names of logged on users
A: weaston-ou
T: 0.018 ms

Q: names of user of logged on users
A: weaston-ou
T: 0.025 ms

Q: distinguished name of active directory users of users of logged on users
E: Singular expression refers to nonexistent object.

Q: name of active directory users of users of logged on users
E: Singular expression refers to nonexistent object.

It looks like active directory users is broken in the latest agent version – is anyone else seeing this?

Bill

CC: @AlanM

2 Likes
2

I tried the same on our dev environment that has 9.5.2 and I see the same results as you. Our prod environment running 9.2.7 does not get the error.

Regs
Rob

2 Likes
3

The active directory users of users inspectors doesn’t always work on QnA due to a privilege needed for the conversion.

Does the following give you anything?

(name of it, distinguished name of it | "N/A") of logged on users of active directory
4

Of course you can’t do that in QnA

5

Alan,

It does correctly work if done in the client context via Fixlet Debugger – the info above is from Fixlet Debugger in Client Context.

The results however also mirror what I’m seeing in my analyses:

The relevance from the domain groups column is:

(name of it, names of groups of it) of (logged on users of active directory)

Bill

6

I’m looking at it now

7

This is actually APAR IV87571

I just fixed the code for the next 9.5 patch

1 Like