The GroupSync script is used to sync Windows Active Directory (AD) groups automatically. Documentation on how to use this script is here.  The default SDMS Admin account is sometimes used as the Fallback Authentication account. If the user does not update the Fallback Authentication password accordingly after a recent change on the default SDMS Admin password. The GroupSync script that is used to sync AD groups automatically, may fail to run as a scheduled Webstatistica job.  This potential issue is also noted on the GroupSync script comments at the below section:

' If the constant USE_ENTERPRISE_SDMS_LOGIN_SETTINGS is True, the script will attempt to login to SDMS
' using the primary and/or secondary login schemes as defined in Enterprise. This may or may not be appropriate;
' if this script is running under WebStatistica and user impersonation isn't on, integrated login may not work.
' But if Fallback authentication is defined with a saved username and password, it should log in with that.
' Otherwise, set USE_ENTERPRISE_SDMS_LOGIN_SETTINGS to False and set the SDMS_USERNAME and SDMS_PASSWORD
' constants as needed to log in to SDMS.

The fourth line of the above comments indicates where the issue might be introduced. If the Fallback authentication is being used to log into SDMS when running the scheduled GroupSync script, incorrect password listed under Enterprise|System Options would result in : 1. the Group_Sync script fails under Webstatistica; 2.the Fallback authentication account gets disabled after max incorrect password login attempts are reached.
 

This article talks about how to resolve the failing issue of a scheduled Webstatistica job that runs the GroupSync script.

Note: USE_ENTERPRISE_SDMS_LOGIN_SETTINGS is True  and having fallback authentication in Enterprise Manager SDMS Options is the only time this article is applicable.

To resolve this issue:

1.Go to Enterprise|System Options|SDMS integration, update the password for the Fallback authentication account ( such as SDMS default "Admin" account)


2. Login to SDMS admin tool|Users with administrator permission , find the listed Fallback authentication account and double click the account to deselect  "Account is disabled" if shown.