Unable to designate an Organization Unit (OU) in the Users/Group tasks against a Domain. (NETIQKB27986)

fact
VigilEnt Security Manager 3.x

fact
VigilEnt Security Agent for Windows 3.2

fact
VigilEnt Security Manager 4.0

symptom
Unable to designate an Organization Unit (OU) in the Users/Group tasks against a Domain. 

cause
The Domain Controller (DC) needs to be added as a system and as a domain Endpoint.

fix
The following steps apply, provided the DC has not already been added as an Endpoint or an Agent.  If it has, it may need to be deleted first in the following order:  Delete the endpoint, then the agent.  If the DC exists as a Discovered System or a System, follow the steps below:

Once a DC that hosts an agent has been added as a system, it will automatically be added under Agents and Adapters and Endpoints. 

Defining the DC as a domain in VSOC: 

1. Right-click Endpoints.
   
2. Select Add Endpoint.
   
3. Select the agent component to be used for that endpoint and click Next.
   
4. Type the actual domain name (may need to use DOMAIN.com where domain is the domain name) in the Name field on the 'Add Endpoints / Define Endpoints' window.
   
5. Select Endpoint Type = Windows Domain.
   
6. ClickIP Lookup. 
   
7. Click Finish.
   
8. From 'Run Tasks', select Domain.
   
9. Enter the "sub-ou" name and select True.
   
10.  Click Finish.

Formerly known as NETIQKB27986