Track-It! 2019: Error occurred while fetching Deleted users. The user has insufficient access rights.

Version 1
    Share This:

    This document contains official content from the BMC Software Knowledge Base. It is automatically updated when the knowledge article is modified.


    PRODUCT:

    Track-It!


    COMPONENT:

    Track-It! 2019 R3


    APPLIES TO:

    Track-It! 2019



    PROBLEM:

    While importing users/technicians from Active Directory in Track-It!, the following error is seen in the logs.
    Error occurred while fetching Deleted users. The user has insufficient access rights.

    User-added image
     


    CAUSE:

    A Non-domain admin account is being used in the Track-It! Directory importer to fetch the users.


    SOLUTION:

     

    When an Active Directory object is deleted, a small part of the object stays in the deleted objects container for a specified time. These objects in AD called tombstone objects that are records of deleted users in AD. It stays there so that other domain controllers that are replicating changes will become aware of the deletion. By default, only the System Admin account and members of the Administrators group can view the contents of this container.

      

    Full article:

      

    https://support.microsoft.com/en-us/help/892806/how-to-let-non-administrators-view-the-active-directory-deleted-object

      
    Track-It! Directory importer uses those records in order to determine which users to remove from Track-It! and in AD. Only Domain Admin accounts can access/view these tombstone records. Therefore, Directory Importer requires that the account used be a Domain Admin so it can properly handle users that have been deleted from AD. 

     


    Article Number:

    000176026


    Article Type:

    Solutions to a Product Problem



      Looking for additional information?    Search BMC Support  or  Browse Knowledge Articles