User Service AD Bind Problem After Password Change

After submitting this case on 5/1/2014 and having received exactly one canned e-mail with links to KB articles that have nothing to do with this problem I’m posting here hoping that some of you good people can help…

Web Security 7.5

We need to change the domain administrator password. Unfortunately we used the domain “Administrator” account as the administrative account for the directory service in Websense. We are not using the domain Administrator credentials to run any of the Websense services. Our Active Directory is in native mode and is at functional level Windows Server 2008 R2.

If I change the password for the domain Administrator account and then go into the Triton Unified Security Center (Web interface), under “Directories” we have “Active Directory (Native Mode) checked and under “Windows NT Directory / Active Directory (Mixed Mode) we had the domain Administrator account credentials entered. Changing the password there does not seem to complete the process and this is the only place where a username and password is cached that I can find. I can’t find any interface in the TRITON console that allows me to add or edit the global catalog server like I’ve seen in KB articles about Active Directory integration showing it done in Websense Manager. I have changed the administrative account on the Directory Service Settings page to a different account, saved everything, and yes restarted all the services. Everything works until I again try to change the domain administrator password and then Websense fails. Computers that are set to prompt for logon information fail and we get application event 4096 on the server, source: WebsenseUserService, Description: “An error occurred while binding to the directory server. Ldap_simple_bind: Invalid credentials” for the domain administrator account.

What am I missing? Where are these credentials being cached?