SOLVED

Cannot get ATP sensors to Start

%3CLINGO-SUB%20id%3D%22lingo-sub-1495922%22%20slang%3D%22en-US%22%3ECannot%20get%20ATP%20sensors%20to%20Start%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1495922%22%20slang%3D%22en-US%22%3E%3CP%3EHi%2C%20I%20am%20able%20to%20successfully%20install%20the%20ATP's%20sensors%20on%20my%20DC's%2C%20but%20cannot%20get%20the%20Service%20to%20Start.%26nbsp%3B%20I%20have%20created%20a%20gMSA%20account%20and%20opened%20up%20the%20firewall%2C%20but%20am%20getting%20Events%207000%2C%207031%2C%20and%207038.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EThe%20AATPSensor%20service%20was%20unable%20to%20log%20on%20as%20xxxxxxxxxx%5CgMSAcct01%24%20with%20the%20currently%20configured%20password%20due%20to%20the%20following%20error%3A%3CBR%20%2F%3EThe%20user%20name%20or%20password%20is%20incorrect.%3C%2FP%3E%3CP%3ETo%20ensure%20that%20the%20service%20is%20configured%20properly%2C%20use%20the%20Services%20snap-in%20in%20Microsoft%20Management%20Console%20(MMC).%3C%2FP%3E%3CDIV%20class%3D%22e%22%3E%3CDIV%20class%3D%22c%22%3E%26nbsp%3B%3C%2FDIV%3E%3CDIV%20class%3D%22c%22%3E%3CSPAN%20class%3D%22t%22%3EEvent%3C%2FSPAN%3E%3CSPAN%20class%3D%22ns%22%3E%20xmlns%3C%2FSPAN%3E%3CSPAN%20class%3D%22m%22%3E%3D%22%3C%2FSPAN%3E%3CSTRONG%3E%3CA%20href%3D%22http%3A%2F%2Fschemas.microsoft.com%2Fwin%2F2004%2F08%2Fevents%2Fevent%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttp%3A%2F%2Fschemas.microsoft.com%2Fwin%2F2004%2F08%2Fevents%2Fevent%3C%2FA%3E%3C%2FSTRONG%3E%3CSPAN%20class%3D%22m%22%3E%22%3C%2FSPAN%3E%3CSPAN%20class%3D%22m%22%3E%26gt%3B%3C%2FSPAN%3E%3C%2FDIV%3E%3CDIV%3E%3CDIV%20class%3D%22e%22%3E%3CDIV%20class%3D%22c%22%3E-ERR%3AREF-NOT-FOUND--%20%3CSPAN%20class%3D%22m%22%3E%26lt%3B%3C%2FSPAN%3E%3CSPAN%20class%3D%22t%22%3ESystem%3C%2FSPAN%3E%3CSPAN%20class%3D%22m%22%3E%26gt%3B%3C%2FSPAN%3E%3C%2FDIV%3E%3CDIV%3E%3CDIV%20class%3D%22e%22%3E%3CDIV%3E%3CSPAN%20class%3D%22b%22%3E%26nbsp%3B%3C%2FSPAN%3E%20%3CSPAN%20class%3D%22m%22%3E%26lt%3B%3C%2FSPAN%3E%3CSPAN%20class%3D%22t%22%3EProvider%3C%2FSPAN%3E%20%3CSPAN%20class%3D%22t%22%3EName%3C%2FSPAN%3E%3CSPAN%20class%3D%22m%22%3E%3D%22%3C%2FSPAN%3E%3CSTRONG%3EService%20Control%20Manager%3C%2FSTRONG%3E%3CSPAN%20class%3D%22m%22%3E%22%3C%2FSPAN%3E%3CSPAN%20class%3D%22t%22%3E%20Guid%3C%2FSPAN%3E%3CSPAN%20class%3D%22m%22%3E%3D%22%3C%2FSPAN%3E%3CSTRONG%3E%7B555908d1-a6d7-4695-8e1e-26931d2012f4%7D%3C%2FSTRONG%3E%3CSPAN%20class%3D%22m%22%3E%22%3C%2FSPAN%3E%3CSPAN%20class%3D%22t%22%3E%20EventSourceName%3C%2FSPAN%3E%3CSPAN%20class%3D%22m%22%3E%3D%22%3C%2FSPAN%3E%3CSTRONG%3EService%20Control%20Manager%3C%2FSTRONG%3E%3CSPAN%20class%3D%22m%22%3E%22%3C%2FSPAN%3E%3CSPAN%20class%3D%22m%22%3E%20%2F%26gt%3B%3C%2FSPAN%3E%3C%2FDIV%3E%3C%2FDIV%3E%3CDIV%20class%3D%22e%22%3E%3CDIV%3E%3CSPAN%20class%3D%22b%22%3E%26nbsp%3B%3C%2FSPAN%3E%20%3CSPAN%20class%3D%22m%22%3E%26lt%3B%3C%2FSPAN%3E%3CSPAN%20class%3D%22t%22%3EEventID%3C%2FSPAN%3E%3CSPAN%20class%3D%22t%22%3E%20Qualifiers%3C%2FSPAN%3E%3CSPAN%20class%3D%22m%22%3E%3D%22%3C%2FSPAN%3E%3CSTRONG%3E49152%3C%2FSTRONG%3E%3CSPAN%20class%3D%22m%22%3E%22%3C%2FSPAN%3E%3CSPAN%20class%3D%22m%22%3E%26gt%3B%3C%2FSPAN%3E%3CSPAN%20class%3D%22tx%22%3E7031%3C%2FSPAN%3E%3CSPAN%20class%3D%22m%22%3E%3CSPAN%20class%3D%22t%22%3EEventID%3C%2FSPAN%3E%3CSPAN%20class%3D%22m%22%3E%26gt%3B%3C%2FSPAN%3E%3C%2FSPAN%3E%3C%2FDIV%3E%3C%2FDIV%3E%3CDIV%20class%3D%22e%22%3E%3CDIV%3E%3CSPAN%20class%3D%22b%22%3E%26nbsp%3B%3C%2FSPAN%3E%20%3CSPAN%20class%3D%22m%22%3E%26lt%3B%3C%2FSPAN%3E%3CSPAN%20class%3D%22t%22%3EVersion%3C%2FSPAN%3E%3CSPAN%20class%3D%22m%22%3E%26gt%3B%3C%2FSPAN%3E%3CSPAN%20class%3D%22tx%22%3E0%3C%2FSPAN%3E%3CSPAN%20class%3D%22m%22%3E%3CSPAN%20class%3D%22t%22%3EVersion%3C%2FSPAN%3E%3CSPAN%20class%3D%22m%22%3E%26gt%3B%3C%2FSPAN%3E%3C%2FSPAN%3E%3C%2FDIV%3E%3C%2FDIV%3E%3CDIV%20class%3D%22e%22%3E%3CDIV%3E%3CSPAN%20class%3D%22b%22%3E%26nbsp%3B%3C%2FSPAN%3E%20%3CSPAN%20class%3D%22m%22%3E%26lt%3B%3C%2FSPAN%3E%3CSPAN%20class%3D%22t%22%3ELevel%3C%2FSPAN%3E%3CSPAN%20class%3D%22m%22%3E%26gt%3B%3C%2FSPAN%3E%3CSPAN%20class%3D%22tx%22%3E2%3C%2FSPAN%3E%3CSPAN%20class%3D%22m%22%3E%3CSPAN%20class%3D%22t%22%3ELevel%3C%2FSPAN%3E%3CSPAN%20class%3D%22m%22%3E%26gt%3B%3C%2FSPAN%3E%3C%2FSPAN%3E%3C%2FDIV%3E%3C%2FDIV%3E%3CDIV%20class%3D%22e%22%3E%3CDIV%3E%3CSPAN%20class%3D%22b%22%3E%26nbsp%3B%3C%2FSPAN%3E%20%3CSPAN%20class%3D%22m%22%3E%26lt%3B%3C%2FSPAN%3E%3CSPAN%20class%3D%22t%22%3ETask%3C%2FSPAN%3E%3CSPAN%20class%3D%22m%22%3E%26gt%3B%3C%2FSPAN%3E%3CSPAN%20class%3D%22tx%22%3E0%3C%2FSPAN%3E%3CSPAN%20class%3D%22m%22%3E%3CSPAN%20class%3D%22t%22%3ETask%3C%2FSPAN%3E%3CSPAN%20class%3D%22m%22%3E%26gt%3B%3C%2FSPAN%3E%3C%2FSPAN%3E%3C%2FDIV%3E%3C%2FDIV%3E%3CDIV%20class%3D%22e%22%3E%3CDIV%3E%3CSPAN%20class%3D%22b%22%3E%26nbsp%3B%3C%2FSPAN%3E%20%3CSPAN%3E%3CSPAN%20class%3D%22m%22%3E%26lt%3B%3C%2FSPAN%3E%3C%2FSPAN%3E%3CSPAN%3EOpcode%3C%2FSPAN%3E%3CSPAN%3E%26gt%3B%3C%2FSPAN%3E%3CSPAN%3E0%3C%2FSPAN%3E%3CSPAN%3E%3CSPAN%3EOpcode%3C%2FSPAN%3E%3CSPAN%3E%26gt%3B%3C%2FSPAN%3E%3C%2FSPAN%3E%3C%2FDIV%3E%3C%2FDIV%3E%3CDIV%20class%3D%22e%22%3E%3CDIV%3E%3CSPAN%20class%3D%22b%22%3E%26nbsp%3B%3C%2FSPAN%3E%20%3CSPAN%20class%3D%22m%22%3E%26lt%3B%3C%2FSPAN%3E%3CSPAN%20class%3D%22t%22%3EKeywords%3C%2FSPAN%3E%3CSPAN%20class%3D%22m%22%3E%26gt%3B%3C%2FSPAN%3E%3CSPAN%20class%3D%22tx%22%3E0x8080000000000000%3C%2FSPAN%3E%3CSPAN%20class%3D%22m%22%3E%3CSPAN%20class%3D%22t%22%3EKeywords%3C%2FSPAN%3E%3CSPAN%20class%3D%22m%22%3E%26gt%3B%3C%2FSPAN%3E%3C%2FSPAN%3E%3C%2FDIV%3E%3C%2FDIV%3E%3CDIV%20class%3D%22e%22%3E%3CDIV%3E%3CSPAN%20class%3D%22b%22%3E%26nbsp%3B%3C%2FSPAN%3E%20%3CSPAN%20class%3D%22m%22%3E%26lt%3B%3C%2FSPAN%3E%3CSPAN%20class%3D%22t%22%3ETimeCreated%3C%2FSPAN%3E%20%3CSPAN%20class%3D%22t%22%3ESystemTime%3C%2FSPAN%3E%3CSPAN%20class%3D%22m%22%3E%3D%22%3C%2FSPAN%3E%3CSTRONG%3E2020-06-26T15%3A20%3A20.638070000Z%3C%2FSTRONG%3E%3CSPAN%20class%3D%22m%22%3E%22%3C%2FSPAN%3E%3CSPAN%20class%3D%22m%22%3E%20%2F%26gt%3B%3C%2FSPAN%3E%3C%2FDIV%3E%3C%2FDIV%3E%3CDIV%20class%3D%22e%22%3E%3CDIV%3E%3CSPAN%20class%3D%22b%22%3E%26nbsp%3B%3C%2FSPAN%3E%20%3CSPAN%20class%3D%22m%22%3E%26lt%3B%3C%2FSPAN%3E%3CSPAN%20class%3D%22t%22%3EEventRecordID%3C%2FSPAN%3E%3CSPAN%20class%3D%22m%22%3E%26gt%3B%3C%2FSPAN%3E%3CSPAN%20class%3D%22tx%22%3E4069362%3C%2FSPAN%3E%3CSPAN%20class%3D%22m%22%3E%3CSPAN%20class%3D%22t%22%3EEventRecordID%3C%2FSPAN%3E%3CSPAN%20class%3D%22m%22%3E%26gt%3B%3C%2FSPAN%3E%3C%2FSPAN%3E%3C%2FDIV%3E%3C%2FDIV%3E%3CDIV%20class%3D%22e%22%3E%3CDIV%3E%3CSPAN%20class%3D%22b%22%3E%26nbsp%3B%3C%2FSPAN%3E%20%3CSPAN%20class%3D%22m%22%3E%26lt%3B%3C%2FSPAN%3E%3CSPAN%20class%3D%22t%22%3ECorrelation%3C%2FSPAN%3E%20%3CSPAN%20class%3D%22m%22%3E%2F%26gt%3B%3C%2FSPAN%3E%3C%2FDIV%3E%3C%2FDIV%3E%3CDIV%20class%3D%22e%22%3E%3CDIV%3E%3CSPAN%20class%3D%22b%22%3E%26nbsp%3B%3C%2FSPAN%3E%20%3CSPAN%20class%3D%22m%22%3E%26lt%3B%3C%2FSPAN%3E%3CSPAN%20class%3D%22t%22%3EExecution%3C%2FSPAN%3E%20%3CSPAN%20class%3D%22t%22%3EProcessID%3C%2FSPAN%3E%3CSPAN%20class%3D%22m%22%3E%3D%22%3C%2FSPAN%3E%3CSTRONG%3E796%3C%2FSTRONG%3E%3CSPAN%20class%3D%22m%22%3E%22%3C%2FSPAN%3E%3CSPAN%20class%3D%22t%22%3E%20ThreadID%3C%2FSPAN%3E%3CSPAN%20class%3D%22m%22%3E%3D%22%3C%2FSPAN%3E%3CSTRONG%3E6264%3C%2FSTRONG%3E%3CSPAN%20class%3D%22m%22%3E%22%3C%2FSPAN%3E%3CSPAN%20class%3D%22m%22%3E%20%2F%26gt%3B%3C%2FSPAN%3E%3C%2FDIV%3E%3C%2FDIV%3E%3CDIV%20class%3D%22e%22%3E%3CDIV%3E%3CSPAN%20class%3D%22b%22%3E%26nbsp%3B%3C%2FSPAN%3E%20%3CSPAN%20class%3D%22m%22%3E%26lt%3B%3C%2FSPAN%3E%3CSPAN%20class%3D%22t%22%3EChannel%3C%2FSPAN%3E%3CSPAN%20class%3D%22m%22%3E%26gt%3B%3C%2FSPAN%3E%3CSPAN%20class%3D%22tx%22%3ESystem%3C%2FSPAN%3E%3CSPAN%20class%3D%22m%22%3E%3CSPAN%20class%3D%22t%22%3EChannel%3C%2FSPAN%3E%3CSPAN%20class%3D%22m%22%3E%26gt%3B%3C%2FSPAN%3E%3C%2FSPAN%3E%3C%2FDIV%3E%3C%2FDIV%3E%3CDIV%20class%3D%22e%22%3E%3CDIV%3E%3CSPAN%20class%3D%22b%22%3E%26nbsp%3B%3C%2FSPAN%3E%20%3CSPAN%20class%3D%22m%22%3E%26lt%3B%3C%2FSPAN%3E%3CSPAN%20class%3D%22t%22%3EComputer%3C%2FSPAN%3E%3CSPAN%20class%3D%22m%22%3E%26gt%3B%3C%2FSPAN%3E%3CSPAN%20class%3D%22tx%22%3ESIT-DC12.xxxxxxxxxxxxx%3C%2FSPAN%3E%3CSPAN%20class%3D%22m%22%3E%3CSPAN%20class%3D%22t%22%3EComputer%3C%2FSPAN%3E%3CSPAN%20class%3D%22m%22%3E%26gt%3B%3C%2FSPAN%3E%3C%2FSPAN%3E%3C%2FDIV%3E%3C%2FDIV%3E%3CDIV%20class%3D%22e%22%3E%3CDIV%3E%3CSPAN%20class%3D%22b%22%3E%26nbsp%3B%3C%2FSPAN%3E%20%3CSPAN%20class%3D%22m%22%3E%26lt%3B%3C%2FSPAN%3E%3CSPAN%20class%3D%22t%22%3ESecurity%3C%2FSPAN%3E%20%3CSPAN%20class%3D%22m%22%3E%2F%26gt%3B%3C%2FSPAN%3E%3C%2FDIV%3E%3C%2FDIV%3E%3CDIV%3E%3CSPAN%20class%3D%22b%22%3E%26nbsp%3B%3C%2FSPAN%3E%20%3CSPAN%3E%3CSPAN%20class%3D%22m%22%3E%3C%2FSPAN%3E%3CSPAN%3ESystem%3C%2FSPAN%3E%3CSPAN%3E%26gt%3B%3C%2FSPAN%3E%3C%2FSPAN%3E%3C%2FDIV%3E%3C%2FDIV%3E%3C%2FDIV%3E%3CDIV%20class%3D%22e%22%3E%3CDIV%20class%3D%22c%22%3E-ERR%3AREF-NOT-FOUND--%20%3CSPAN%20class%3D%22m%22%3E%26lt%3B%3C%2FSPAN%3E%3CSPAN%20class%3D%22t%22%3EEventData%3C%2FSPAN%3E%3CSPAN%20class%3D%22m%22%3E%26gt%3B%3C%2FSPAN%3E%3C%2FDIV%3E%3CDIV%3E%3CDIV%20class%3D%22e%22%3E%3CDIV%3E%3CSPAN%20class%3D%22b%22%3E%26nbsp%3B%3C%2FSPAN%3E%20%3CSPAN%20class%3D%22m%22%3E%26lt%3B%3C%2FSPAN%3E%3CSPAN%20class%3D%22t%22%3EData%3C%2FSPAN%3E%3CSPAN%20class%3D%22t%22%3E%20Name%3C%2FSPAN%3E%3CSPAN%20class%3D%22m%22%3E%3D%22%3C%2FSPAN%3E%3CSTRONG%3Eparam1%3C%2FSTRONG%3E%3CSPAN%20class%3D%22m%22%3E%22%3C%2FSPAN%3E%3CSPAN%20class%3D%22m%22%3E%26gt%3B%3C%2FSPAN%3E%3CSPAN%20class%3D%22tx%22%3EAzure%20Advanced%20Threat%20Protection%20Sensor%3C%2FSPAN%3E%3CSPAN%20class%3D%22m%22%3E%3CSPAN%20class%3D%22t%22%3EData%3C%2FSPAN%3E%3CSPAN%20class%3D%22m%22%3E%26gt%3B%3C%2FSPAN%3E%3C%2FSPAN%3E%3C%2FDIV%3E%3C%2FDIV%3E%3CDIV%20class%3D%22e%22%3E%3CDIV%3E%3CSPAN%20class%3D%22b%22%3E%26nbsp%3B%3C%2FSPAN%3E%20%3CSPAN%20class%3D%22m%22%3E%26lt%3B%3C%2FSPAN%3E%3CSPAN%20class%3D%22t%22%3EData%3C%2FSPAN%3E%3CSPAN%20class%3D%22t%22%3E%20Name%3C%2FSPAN%3E%3CSPAN%20class%3D%22m%22%3E%3D%22%3C%2FSPAN%3E%3CSTRONG%3Eparam2%3C%2FSTRONG%3E%3CSPAN%20class%3D%22m%22%3E%22%3C%2FSPAN%3E%3CSPAN%20class%3D%22m%22%3E%26gt%3B%3C%2FSPAN%3E%3CSPAN%20class%3D%22tx%22%3E909523%3C%2FSPAN%3E%3CSPAN%20class%3D%22m%22%3E%3CSPAN%20class%3D%22t%22%3EData%3C%2FSPAN%3E%3CSPAN%20class%3D%22m%22%3E%26gt%3B%3C%2FSPAN%3E%3C%2FSPAN%3E%3C%2FDIV%3E%3C%2FDIV%3E%3CDIV%20class%3D%22e%22%3E%3CDIV%3E%3CSPAN%20class%3D%22b%22%3E%26nbsp%3B%3C%2FSPAN%3E%20%3CSPAN%20class%3D%22m%22%3E%26lt%3B%3C%2FSPAN%3E%3CSPAN%20class%3D%22t%22%3EData%3C%2FSPAN%3E%3CSPAN%20class%3D%22t%22%3E%20Name%3C%2FSPAN%3E%3CSPAN%20class%3D%22m%22%3E%3D%22%3C%2FSPAN%3E%3CSTRONG%3Eparam3%3C%2FSTRONG%3E%3CSPAN%20class%3D%22m%22%3E%22%3C%2FSPAN%3E%3CSPAN%20class%3D%22m%22%3E%26gt%3B%3C%2FSPAN%3E%3CSPAN%20class%3D%22tx%22%3E5000%3C%2FSPAN%3E%3CSPAN%20class%3D%22m%22%3E%3CSPAN%20class%3D%22t%22%3EData%3C%2FSPAN%3E%3CSPAN%20class%3D%22m%22%3E%26gt%3B%3C%2FSPAN%3E%3C%2FSPAN%3E%3C%2FDIV%3E%3C%2FDIV%3E%3CDIV%20class%3D%22e%22%3E%3CDIV%3E%3CSPAN%20class%3D%22b%22%3E%26nbsp%3B%3C%2FSPAN%3E%20%3CSPAN%20class%3D%22m%22%3E%26lt%3B%3C%2FSPAN%3E%3CSPAN%20class%3D%22t%22%3EData%3C%2FSPAN%3E%3CSPAN%20class%3D%22t%22%3E%20Name%3C%2FSPAN%3E%3CSPAN%20class%3D%22m%22%3E%3D%22%3C%2FSPAN%3E%3CSTRONG%3Eparam4%3C%2FSTRONG%3E%3CSPAN%20class%3D%22m%22%3E%22%3C%2FSPAN%3E%3CSPAN%20class%3D%22m%22%3E%26gt%3B%3C%2FSPAN%3E%3CSPAN%20class%3D%22tx%22%3E1%3C%2FSPAN%3E%3CSPAN%20class%3D%22m%22%3E%3CSPAN%20class%3D%22t%22%3EData%3C%2FSPAN%3E%3CSPAN%20class%3D%22m%22%3E%26gt%3B%3C%2FSPAN%3E%3C%2FSPAN%3E%3C%2FDIV%3E%3C%2FDIV%3E%3CDIV%20class%3D%22e%22%3E%3CDIV%3E%3CSPAN%20class%3D%22b%22%3E%26nbsp%3B%3C%2FSPAN%3E%20%3CSPAN%20class%3D%22m%22%3E%26lt%3B%3C%2FSPAN%3E%3CSPAN%20class%3D%22t%22%3EData%3C%2FSPAN%3E%3CSPAN%20class%3D%22t%22%3E%20Name%3C%2FSPAN%3E%3CSPAN%20class%3D%22m%22%3E%3D%22%3C%2FSPAN%3E%3CSTRONG%3Eparam5%3C%2FSTRONG%3E%3CSPAN%20class%3D%22m%22%3E%22%3C%2FSPAN%3E%3CSPAN%20class%3D%22m%22%3E%26gt%3B%3C%2FSPAN%3E%3CSPAN%20class%3D%22tx%22%3ERestart%20the%20service%3C%2FSPAN%3E%3CSPAN%20class%3D%22m%22%3E%3CSPAN%20class%3D%22t%22%3EData%3C%2FSPAN%3E%3CSPAN%20class%3D%22m%22%3E%26gt%3B%3C%2FSPAN%3E%3C%2FSPAN%3E%3C%2FDIV%3E%3C%2FDIV%3E%3CDIV%20class%3D%22e%22%3E%3CDIV%3E%3CSPAN%20class%3D%22b%22%3E%26nbsp%3B%3C%2FSPAN%3E%20%3CSPAN%20class%3D%22m%22%3E%26lt%3B%3C%2FSPAN%3E%3CSPAN%20class%3D%22t%22%3EBinary%3C%2FSPAN%3E%3CSPAN%20class%3D%22m%22%3E%26gt%3B%3C%2FSPAN%3E%3CSPAN%20class%3D%22tx%22%3E4100410054005000530065006E0073006F0072000000%3C%2FSPAN%3E%3CSPAN%20class%3D%22m%22%3E%3CSPAN%20class%3D%22t%22%3EBinary%3C%2FSPAN%3E%3CSPAN%20class%3D%22m%22%3E%26gt%3B%3C%2FSPAN%3E%3C%2FSPAN%3E%3C%2FDIV%3E%3C%2FDIV%3E%3CDIV%3E%3CSPAN%20class%3D%22b%22%3E%26nbsp%3B%3C%2FSPAN%3E%20%3CSPAN%3E%3CSPAN%20class%3D%22m%22%3E%3C%2FSPAN%3E%3CSPAN%3EEventData%3C%2FSPAN%3E%3CSPAN%3E%26gt%3B%3C%2FSPAN%3E%3C%2FSPAN%3E%3C%2FDIV%3E%3C%2FDIV%3E%3C%2FDIV%3E%3CDIV%3E%3CSPAN%20class%3D%22b%22%3E%26nbsp%3B%3C%2FSPAN%3E%20%3CSPAN%3E%3CSPAN%20class%3D%22m%22%3E%3C%2FSPAN%3E%3CSPAN%3EEvent%3C%2FSPAN%3E%3CSPAN%3E%26gt%3B%3C%2FSPAN%3E%3C%2FSPAN%3E%3C%2FDIV%3E%3C%2FDIV%3E%3C%2FDIV%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1496006%22%20slang%3D%22en-US%22%3ERe%3A%20Cannot%20get%20ATP%20sensors%20to%20Start%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1496006%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F72209%22%20target%3D%22_blank%22%3E%40Seth%20Holek%3C%2FA%3E%26nbsp%3B%2C%20you%20should%20find%20the%20clues%20in%20the%20sensor's%20own%20logs%20folder%2C%20not%20in%20the%26nbsp%3B%20windows%20event%20log.%3C%2FP%3E%0A%3CP%3EJust%20to%20be%20clear%2C%20the%20gmsa%20account%20was%20configured%20in%20the%20portal%20right%3F%20you%20didn't%20change%20the%20actual%20windows%20service%2C%20did%20you%20%3F%20the%20sensor%20should%20run%20with%20it's%20pre%20configured%20virtual%20account%20(which%20inherits%20local%20service)%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1496144%22%20slang%3D%22en-US%22%3ERe%3A%20Cannot%20get%20ATP%20sensors%20to%20Start%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1496144%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F106935%22%20target%3D%22_blank%22%3E%40Eli%20Ofek%3C%2FA%3E%26nbsp%3B%3C%2FP%3E%3CP%3EYes%2C%20I%20added%20the%20gmsa%20account%20to%20the%20Directory%20Services%20credentials%20in%20the%20Portal%2C%20and%20I%20did%20change%20the%20service%20from%20Local%20Service%20to%20the%20gmsa%20account.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EHere%20are%20errors%20from%20the%20ATP%20logs%3A%3C%2FP%3E%3CP%3E2020-06-29%2014%3A20%3A40.9680%20Error%20DirectoryServicesClient%2B%3CCREATELDAPCONNECTIONASYNC%3Ed__38%20Microsoft.Tri.Infrastructure.ExtendedException%3A%20CreateLdapConnectionAsync%20failed%20%5BDomainControllerDnsName%3DSIT-DC12.xxxxxxxx.local%5D%3CBR%20%2F%3Eat%20async%20Task%3CLDAPCONNECTION%3E%20Microsoft.Tri.Sensor.DirectoryServicesClient.CreateLdapConnectionAsync(DomainControllerConnectionData%20domainControllerConnectionData%2C%20bool%20isGlobalCatalog%2C%20bool%20isTraversing)%3CBR%20%2F%3Eat%20async%20Task%3CBOOL%3E%20Microsoft.Tri.Sensor.DirectoryServicesClient.TryCreateLdapConnectionAsync(DomainControllerConnectionData%20domainControllerConnectionData%2C%20bool%20isGlobalCatalog%2C%20bool%20isTraversing)%3C%2FBOOL%3E%3C%2FLDAPCONNECTION%3E%3C%2FCREATELDAPCONNECTIONASYNC%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E2020-06-29%2014%3A20%3A39.8430%20Warn%20DirectoryServicesClient%20CreateLdapConnectionAsync%20failed%20to%20retrieve%20group%20managed%20service%20account%20password.%20%5BDomainControllerDnsName%3DSIT-DC12.xxxxxxx.local%20Domain%3Dxxxxxxxx.local%20UserName%3DgMSAcct01%24%20%5D%3CBR%20%2F%3E2020-06-29%2014%3A20%3A40.9680%20Error%20DirectoryServicesClient%2B%3CCREATELDAPCONNECTIONASYNC%3Ed__38%20Microsoft.Tri.Infrastructure.ExtendedException%3A%20CreateLdapConnectionAsync%20failed%20%5BDomainControllerDnsName%3DSIT-DC12.xxxxxxxx.local%5D%3CBR%20%2F%3Eat%20async%20Task%3CLDAPCONNECTION%3E%20Microsoft.Tri.Sensor.DirectoryServicesClient.CreateLdapConnectionAsync(DomainControllerConnectionData%20domainControllerConnectionData%2C%20bool%20isGlobalCatalog%2C%20bool%20isTraversing)%3CBR%20%2F%3Eat%20async%20Task%3CBOOL%3E%20Microsoft.Tri.Sensor.DirectoryServicesClient.TryCreateLdapConnectionAsync(DomainControllerConnectionData%20domainControllerConnectionData%2C%20bool%20isGlobalCatalog%2C%20bool%20isTraversing)%3CBR%20%2F%3E2020-06-29%2014%3A20%3A41.0305%20Error%20DirectoryServicesClient%20Microsoft.Tri.Infrastructure.ExtendedException%3A%20Failed%20to%20communicate%20with%20configured%20domain%20controllers%3CBR%20%2F%3Eat%20new%20Microsoft.Tri.Sensor.DirectoryServicesClient(IConfigurationManager%20configurationManager%2C%20IDomainNetworkCredentialsManager%20domainNetworkCredentialsManager%2C%20IImpersonationManager%20impersonationManager%2C%20IMetricManager%20metricManager%2C%20IWorkspaceApplicationSensorApiJsonProxy%20workspaceApplicationSensorApiJsonProxy)%3CBR%20%2F%3Eat%20object%20lambda_method(Closure%2C%20object%5B%5D)%3CBR%20%2F%3Eat%20object%20Autofac.Core.Activators.Reflection.ConstructorParameterBinding.Instantiate()%3CBR%20%2F%3Eat%20void%20Microsoft.Tri.Infrastructure.ModuleManager.AddModules(Type%5B%5D%20moduleTypes)%3CBR%20%2F%3Eat%20new%20Microsoft.Tri.Sensor.SensorModuleManager()%3CBR%20%2F%3Eat%20ModuleManager%20Microsoft.Tri.Sensor.SensorService.CreateModuleManager()%3CBR%20%2F%3Eat%20async%20Task%20Microsoft.Tri.Infrastructure.Service.OnStartAsync()%3CBR%20%2F%3Eat%20void%20Microsoft.Tri.Infrastructure.TaskExtension.Await(Task%20task)%3CBR%20%2F%3Eat%20void%20Microsoft.Tri.Infrastructure.Service.OnStart(string%5B%5D%20args)%3C%2FBOOL%3E%3C%2FLDAPCONNECTION%3E%3C%2FCREATELDAPCONNECTIONASYNC%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1496166%22%20slang%3D%22en-US%22%3ERe%3A%20Cannot%20get%20ATP%20sensors%20to%20Start%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1496166%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F72209%22%20target%3D%22_blank%22%3E%40Seth%20Holek%3C%2FA%3E%26nbsp%3B%20uninstall%20and%20reinstall%20to%20make%20sure%20the%20service%20is%20deployed%20correctly%2C%20this%20is%20broken%20because%20you%20changed%20the%20services%20logon...%20it%20is%20unable%20to%20retrieve%20the%20gmsa%20password%20this%20way%2C%3C%2FP%3E%0A%3CP%3Ethe%20gmsa%20should%20only%20be%20configured%20on%26nbsp%3B%20the%20portal%2C%20the%20system%20takes%20care%20of%20all%20the%20rest...%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1496692%22%20slang%3D%22en-US%22%3ERe%3A%20Cannot%20get%20ATP%20sensors%20to%20Start%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1496692%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F106935%22%20target%3D%22_blank%22%3E%40Eli%20Ofek%3C%2FA%3E%26nbsp%3BThat%20did%20the%20trick.%26nbsp%3B%20Thanks%20so%20much%20for%20your%20assistance!!%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1496740%22%20slang%3D%22en-US%22%3ERe%3A%20Cannot%20get%20ATP%20sensors%20to%20Start%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1496740%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F106935%22%20target%3D%22_blank%22%3E%40Eli%20Ofek%3C%2FA%3E%26nbsp%3BThanks.%26nbsp%3B%20I%20reinstalled%20the%20Sensor%20on%20both%20my%20DC's%2C%20and%20was%20able%20to%20get%20it%20work%20on%20the%20DC%20in%20Azure%2C%20but%20I%20still%20cannot%20get%20it%20to%20work%20on%20my%20local%20DC.%26nbsp%3B%20I%20did%20the%20same%20install%20process%20for%20both%20DC's%2C%20but%20am%20still%20getting%20the%20same%20errors%20I%20listed%20below.%26nbsp%3B%20Is%20there%20a%20particular%20port%20on%20the%20firewall%20that%20needs%20to%20be%20opened%20up%2C%20or%20am%20I%20off%20base%20with%20that%3F%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1496987%22%20slang%3D%22en-US%22%3ERe%3A%20Cannot%20get%20ATP%20sensors%20to%20Start%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1496987%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F72209%22%20target%3D%22_blank%22%3E%40Seth%20Holek%3C%2FA%3E%26nbsp%3BAre%26nbsp%3B%20you%20sure%20you%20got%20the%20EXACT%20same%20error%20again%20that%20says%20%22%3CSPAN%3Efailed%20to%20retrieve%20group%20managed%20service%20account%20password.%22%20%3F%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3E%3CSPAN%3EI%20am%20asking%20because%20there%20might%20be%20several%20similar%20errors%2C%20but%20different%20causes.%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3E%3CSPAN%3EIf%20it's%20the%20exact%20same%20error%2C%20then%20the%20problem%20is%20that%20this%20machine%20account%20does%20not%20have%20permissions%20to%20get%20the%20password%2C%20and%20you%20need%20to%20fix%20permissions.%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3E%3CSPAN%3EIF%20not%2C%20it's%20likely%20a%20FW%20issue.%20note%20the%20ports%20table%20in%20the%20docs%2C%20especially%26nbsp%3BLDAP%20ports%26nbsp%3B%20that%20need%20to%20be%20open.%3C%2FSPAN%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1497041%22%20slang%3D%22en-US%22%3ERe%3A%20Cannot%20get%20ATP%20sensors%20to%20Start%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1497041%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F106935%22%20target%3D%22_blank%22%3E%40Eli%20Ofek%3C%2FA%3E%26nbsp%3BLOL.%26nbsp%3B%20Sounds%20like%20you've%20done%20this%20before.%26nbsp%3B%20You%20are%20once%20again%20correct%2C%20and%20that%20error%20is%20different.%26nbsp%3B%20I%20am%20thinking%20that%20it%20has%20to%20be%20FW-related.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EError%20DirectoryServicesClient%2B%3CCREATELDAPCONNECTIONASYNC%3Ed__38%20Microsoft.Tri.Infrastructure.ExtendedException%3A%20CreateLdapConnectionAsync%20failed%20%5BDomainControllerDnsName%3DSIT-DC12.mbchamber.local%5D%3CBR%20%2F%3Eat%20async%20Task%3CLDAPCONNECTION%3E%20Microsoft.Tri.Sensor.DirectoryServicesClient.CreateLdapConnectionAsync(DomainControllerConnectionData%20domainControllerConnectionData%2C%20bool%20isGlobalCatalog%2C%20bool%20isTraversing)%3CBR%20%2F%3Eat%20async%20Task%3CBOOL%3E%20Microsoft.Tri.Sensor.DirectoryServicesClient.TryCreateLdapConnectionAsync(DomainControllerConnectionData%20domainControllerConnectionData%2C%20bool%20isGlobalCatalog%2C%20bool%20isTraversing)%3CBR%20%2F%3E2020-06-29%2018%3A52%3A52.6305%20Error%20DirectoryServicesClient%20Microsoft.Tri.Infrastructure.ExtendedException%3A%20Failed%20to%20communicate%20with%20configured%20domain%20controllers%3CBR%20%2F%3Eat%20new%20Microsoft.Tri.Sensor.DirectoryServicesClient(IConfigurationManager%20configurationManager%2C%20IDomainNetworkCredentialsManager%20domainNetworkCredentialsManager%2C%20IImpersonationManager%20impersonationManager%2C%20IMetricManager%20metricManager%2C%20IWorkspaceApplicationSensorApiJsonProxy%20workspaceApplicationSensorApiJsonProxy)%3CBR%20%2F%3Eat%20object%20lambda_method(Closure%2C%20object%5B%5D)%3CBR%20%2F%3Eat%20object%20Autofac.Core.Activators.Reflection.ConstructorParameterBinding.Instantiate()%3CBR%20%2F%3Eat%20void%20Microsoft.Tri.Infrastructure.ModuleManager.AddModules(Type%5B%5D%20moduleTypes)%3CBR%20%2F%3Eat%20new%20Microsoft.Tri.Sensor.SensorModuleManager()%3CBR%20%2F%3Eat%20ModuleManager%20Microsoft.Tri.Sensor.SensorService.CreateModuleManager()%3CBR%20%2F%3Eat%20async%20Task%20Microsoft.Tri.Infrastructure.Service.OnStartAsync()%3CBR%20%2F%3Eat%20void%20Microsoft.Tri.Infrastructure.TaskExtension.Await(Task%20task)%3CBR%20%2F%3Eat%20void%20Microsoft.Tri.Infrastructure.Service.OnStart(string%5B%5D%20args)%3C%2FBOOL%3E%3C%2FLDAPCONNECTION%3E%3C%2FCREATELDAPCONNECTIONASYNC%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1497482%22%20slang%3D%22en-US%22%3ERe%3A%20Cannot%20get%20ATP%20sensors%20to%20Start%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1497482%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F106935%22%20target%3D%22_blank%22%3E%40Eli%20Ofek%3C%2FA%3E%3C%2FP%3E%3CP%3ELOL.%26nbsp%3B%20Sounds%20like%20you've%20done%20this%20before.%26nbsp%3B%20You%20are%20once%20again%20correct%2C%20and%20that%20error%20is%20different.%26nbsp%3B%20I%20am%20thinking%20that%20it%20has%20to%20be%20FW-related.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EError%20DirectoryServicesClient%2B%3CCREATELDAPCONNECTIONASYNC%3Ed__38%20Microsoft.Tri.Infrastructure.ExtendedException%3A%20CreateLdapConnectionAsync%20failed%20%5BDomainControllerDnsName%3DSIT-DC12.xxxxxxx.local%5D%3CBR%20%2F%3Eat%20async%20Task%3CLDAPCONNECTION%3E%20Microsoft.Tri.Sensor.DirectoryServicesClient.CreateLdapConnectionAsync(DomainControllerConnectionData%20domainControllerConnectionData%2C%20bool%20isGlobalCatalog%2C%20bool%20isTraversing)%3CBR%20%2F%3Eat%20async%20Task%3CBOOL%3E%20Microsoft.Tri.Sensor.DirectoryServicesClient.TryCreateLdapConnectionAsync(DomainControllerConnectionData%20domainControllerConnectionData%2C%20bool%20isGlobalCatalog%2C%20bool%20isTraversing)%3CBR%20%2F%3E2020-06-29%2018%3A52%3A52.6305%20Error%20DirectoryServicesClient%20Microsoft.Tri.Infrastructure.ExtendedException%3A%20Failed%20to%20communicate%20with%20configured%20domain%20controllers%3CBR%20%2F%3Eat%20new%20Microsoft.Tri.Sensor.DirectoryServicesClient(IConfigurationManager%20configurationManager%2C%20IDomainNetworkCredentialsManager%20domainNetworkCredentialsManager%2C%20IImpersonationManager%20impersonationManager%2C%20IMetricManager%20metricManager%2C%20IWorkspaceApplicationSensorApiJsonProxy%20workspaceApplicationSensorApiJsonProxy)%3CBR%20%2F%3Eat%20object%20lambda_method(Closure%2C%20object%5B%5D)%3CBR%20%2F%3Eat%20object%20Autofac.Core.Activators.Reflection.ConstructorParameterBinding.Instantiate()%3CBR%20%2F%3Eat%20void%20Microsoft.Tri.Infrastructure.ModuleManager.AddModules(Type%5B%5D%20moduleTypes)%3CBR%20%2F%3Eat%20new%20Microsoft.Tri.Sensor.SensorModuleManager()%3CBR%20%2F%3Eat%20ModuleManager%20Microsoft.Tri.Sensor.SensorService.CreateModuleManager()%3CBR%20%2F%3Eat%20async%20Task%20Microsoft.Tri.Infrastructure.Service.OnStartAsync()%3CBR%20%2F%3Eat%20void%20Microsoft.Tri.Infrastructure.TaskExtension.Await(Task%20task)%3CBR%20%2F%3Eat%20void%20Microsoft.Tri.Infrastructure.Service.OnStart(string%5B%5D%20args)%3C%2FBOOL%3E%3C%2FLDAPCONNECTION%3E%3C%2FCREATELDAPCONNECTIONASYNC%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E
Highlighted
Occasional Contributor

Hi, I am able to successfully install the ATP's sensors on my DC's, but cannot get the Service to Start.  I have created a gMSA account and opened up the firewall, but am getting Events 7000, 7031, and 7038.

 

The AATPSensor service was unable to log on as xxxxxxxxxx\gMSAcct01$ with the currently configured password due to the following error:
The user name or password is incorrect.

To ensure that the service is configured properly, use the Services snap-in in Microsoft Management Console (MMC).

 
- <System>
  <Provider Name="Service Control Manager" Guid="{555908d1-a6d7-4695-8e1e-26931d2012f4}" EventSourceName="Service Control Manager" />
  <EventID Qualifiers="49152">7031</EventID>
  <Version>0</Version>
  <Level>2</Level>
  <Task>0</Task>
  <Opcode>0</Opcode>
  <Keywords>0x8080000000000000</Keywords>
  <TimeCreated SystemTime="2020-06-26T15:20:20.638070000Z" />
  <EventRecordID>4069362</EventRecordID>
  <Correlation />
  <Execution ProcessID="796" ThreadID="6264" />
  <Channel>System</Channel>
  <Computer>SIT-DC12.xxxxxxxxxxxxx</Computer>
  <Security />
  </System>
- <EventData>
  <Data Name="param1">Azure Advanced Threat Protection Sensor</Data>
  <Data Name="param2">909523</Data>
  <Data Name="param3">5000</Data>
  <Data Name="param4">1</Data>
  <Data Name="param5">Restart the service</Data>
  <Binary>4100410054005000530065006E0073006F0072000000</Binary>
  </EventData>
  </Event>
6 Replies
Highlighted

@Seth Holek , you should find the clues in the sensor's own logs folder, not in the  windows event log.

Just to be clear, the gmsa account was configured in the portal right? you didn't change the actual windows service, did you ? the sensor should run with it's pre configured virtual account (which inherits local service)

Highlighted

@Eli Ofek 

Yes, I added the gmsa account to the Directory Services credentials in the Portal, and I did change the service from Local Service to the gmsa account.

 

Here are errors from the ATP logs:

2020-06-29 14:20:40.9680 Error DirectoryServicesClient+<CreateLdapConnectionAsync>d__38 Microsoft.Tri.Infrastructure.ExtendedException: CreateLdapConnectionAsync failed [DomainControllerDnsName=SIT-DC12.xxxxxxxx.local]
at async Task<LdapConnection> Microsoft.Tri.Sensor.DirectoryServicesClient.CreateLdapConnectionAsync(DomainControllerConnectionData domainControllerConnectionData, bool isGlobalCatalog, bool isTraversing)
at async Task<bool> Microsoft.Tri.Sensor.DirectoryServicesClient.TryCreateLdapConnectionAsync(DomainControllerConnectionData domainControllerConnectionData, bool isGlobalCatalog, bool isTraversing)

 

2020-06-29 14:20:39.8430 Warn DirectoryServicesClient CreateLdapConnectionAsync failed to retrieve group managed service account password. [DomainControllerDnsName=SIT-DC12.xxxxxxx.local Domain=xxxxxxxx.local UserName=gMSAcct01$ ]
2020-06-29 14:20:40.9680 Error DirectoryServicesClient+<CreateLdapConnectionAsync>d__38 Microsoft.Tri.Infrastructure.ExtendedException: CreateLdapConnectionAsync failed [DomainControllerDnsName=SIT-DC12.xxxxxxxx.local]
at async Task<LdapConnection> Microsoft.Tri.Sensor.DirectoryServicesClient.CreateLdapConnectionAsync(DomainControllerConnectionData domainControllerConnectionData, bool isGlobalCatalog, bool isTraversing)
at async Task<bool> Microsoft.Tri.Sensor.DirectoryServicesClient.TryCreateLdapConnectionAsync(DomainControllerConnectionData domainControllerConnectionData, bool isGlobalCatalog, bool isTraversing)
2020-06-29 14:20:41.0305 Error DirectoryServicesClient Microsoft.Tri.Infrastructure.ExtendedException: Failed to communicate with configured domain controllers
at new Microsoft.Tri.Sensor.DirectoryServicesClient(IConfigurationManager configurationManager, IDomainNetworkCredentialsManager domainNetworkCredentialsManager, IImpersonationManager impersonationManager, IMetricManager metricManager, IWorkspaceApplicationSensorApiJsonProxy workspaceApplicationSensorApiJsonProxy)
at object lambda_method(Closure, object[])
at object Autofac.Core.Activators.Reflection.ConstructorParameterBinding.Instantiate()
at void Microsoft.Tri.Infrastructure.ModuleManager.AddModules(Type[] moduleTypes)
at new Microsoft.Tri.Sensor.SensorModuleManager()
at ModuleManager Microsoft.Tri.Sensor.SensorService.CreateModuleManager()
at async Task Microsoft.Tri.Infrastructure.Service.OnStartAsync()
at void Microsoft.Tri.Infrastructure.TaskExtension.Await(Task task)
at void Microsoft.Tri.Infrastructure.Service.OnStart(string[] args)

Highlighted
Best Response confirmed by Seth Holek (Occasional Contributor)
Solution

@Seth Holek  uninstall and reinstall to make sure the service is deployed correctly, this is broken because you changed the services logon... it is unable to retrieve the gmsa password this way,

the gmsa should only be configured on  the portal, the system takes care of all the rest...

Highlighted

@Eli Ofek Thanks.  I reinstalled the Sensor on both my DC's, and was able to get it work on the DC in Azure, but I still cannot get it to work on my local DC.  I did the same install process for both DC's, but am still getting the same errors I listed below.  Is there a particular port on the firewall that needs to be opened up, or am I off base with that?

Highlighted

@Seth Holek Are  you sure you got the EXACT same error again that says "failed to retrieve group managed service account password." ?

I am asking because there might be several similar errors, but different causes.

If it's the exact same error, then the problem is that this machine account does not have permissions to get the password, and you need to fix permissions.

IF not, it's likely a FW issue. note the ports table in the docs, especially LDAP ports  that need to be open.

Highlighted

@Eli Ofek LOL.  Sounds like you've done this before.  You are once again correct, and that error is different.  I am thinking that it has to be FW-related.

 

Error DirectoryServicesClient+<CreateLdapConnectionAsync>d__38 Microsoft.Tri.Infrastructure.ExtendedException: CreateLdapConnectionAsync failed [DomainControllerDnsName=SIT-DC12.xxxxxxx.local]
at async Task<LdapConnection> Microsoft.Tri.Sensor.DirectoryServicesClient.CreateLdapConnectionAsync(DomainControllerConnectionData domainControllerConnectionData, bool isGlobalCatalog, bool isTraversing)
at async Task<bool> Microsoft.Tri.Sensor.DirectoryServicesClient.TryCreateLdapConnectionAsync(DomainControllerConnectionData domainControllerConnectionData, bool isGlobalCatalog, bool isTraversing)
2020-06-29 18:52:52.6305 Error DirectoryServicesClient Microsoft.Tri.Infrastructure.ExtendedException: Failed to communicate with configured domain controllers
at new Microsoft.Tri.Sensor.DirectoryServicesClient(IConfigurationManager configurationManager, IDomainNetworkCredentialsManager domainNetworkCredentialsManager, IImpersonationManager impersonationManager, IMetricManager metricManager, IWorkspaceApplicationSensorApiJsonProxy workspaceApplicationSensorApiJsonProxy)
at object lambda_method(Closure, object[])
at object Autofac.Core.Activators.Reflection.ConstructorParameterBinding.Instantiate()
at void Microsoft.Tri.Infrastructure.ModuleManager.AddModules(Type[] moduleTypes)
at new Microsoft.Tri.Sensor.SensorModuleManager()
at ModuleManager Microsoft.Tri.Sensor.SensorService.CreateModuleManager()
at async Task Microsoft.Tri.Infrastructure.Service.OnStartAsync()
at void Microsoft.Tri.Infrastructure.TaskExtension.Await(Task task)
at void Microsoft.Tri.Infrastructure.Service.OnStart(string[] args)