It looks like the latest version of AMP, 6.0.5, released Dec 5, 2017 has some memory attack prevention.  Here are some excerpts from the release notes.   • Exploit Prevention detection engine to block exploits and memory attacks that target certain processes.   •System Process Protection adds protection for memory attacks against certain Windows system processes. ... View more

I am not sure how your AD architecture is but I am guessing you are trying to search in a OU called users within your domain.  If that is true, it should be as follows: Name: Staff Search Path: OU=Users,DC=xyz,DC=com Filter: (&(sAMAccountName=%USERID%)(memberOf=CN=VSOMGary,CN=Users,DC=xyz,DC=com)) VSOMGary is a global security group I created to allow users access to specific cameras.  You need to add users to this group in order for them to have access to log into VSOM.  ... View more

This happens in our environment all of the time.  The workaround we use is to navigate to the CPAM folder located at "C:\Program Files (x86)\Cisco Systems\CPAM" and give all users(we do local and domain) full control of this folder.  One thing to note about CPAM is only one person can be logged on the same computer/server.  We tried deploying CPAM in our RDS environment and found only one person per server can log into CPAM and others trying to log in would get the aforementioned error.  ... View more

I am not aware of an App for CPAM. What I do in our environment is remote into an RDS(Remote Desktop Services) server with the Remote Desktop app and open CPAM from that server.  One thing to note about this setup is you can only have one instance of CPAM open on the server.  It will now work is another user on the server has CPAM open.  Hope this helps. ... View more