Follow

Distributed Processing is not Working in Forensic Tools

Created by: Brendan Bone
Created date:
Last Updated date:

Problem

Forensic Tools doesn't appear to be sending work to any Distributed Processing Engines (DPE's).

 

Resolution

Confirm that the following have been configured properly.

  1. Make sure .NET 4.7.2 is installed on the DPM and all DPEs.
  2. Ports 34096 (to the DPM) and 34097 (to the DPEs) are open as needed.
  3. A mirrored, domain service account is being used to run the DPE service.
  4. All the involved machines are running the same version of the Processing Engine, and that it's the correct version for the version of Forensic Tools being used.
  5. Service account has local admin privileges on all the involved machines.
  6. Case and Evidence folders are shared out, and that the service account has full access to those shares.
  7. If using MS-SQL, make sure the service account is added to the Logins with the "sysadmin" role.
  8. On the machine running Forensic Tools, make sure you're logged into Windows under the service account.
  9. Distributed Processing Engine machines are added under Tools > "Processing Engine Config" in FTK/Lab/Enterprise.
  10. Make sure your Case folder and Evidence are using UNC paths, not mapped drive letters.

Additional Note: Consider reviewing this help article regarding DPE configuration.

Was this article helpful?
0 out of 0 found this helpful
Have more questions? Submit a request

Comments

Powered by Zendesk