STEP 2: AUTHENTICATION - FAILED -[SOLVED]
Trying to deploy the agent via "Single Machine Provisioning" to Windows XP clients. This fails at:
Connecting to ADMIN$
ERROR: Failed to open connection - NT_STATUS_ACCESS_DENIED
STEP 3: PUSH SCRIPT\PROVISIONING -
End of remote communications.
[04/29/10 09:55:44 AM] End provisioning run.
0 Comments
[ + ] Show comments
Answers (5)
Please log in to answer
Posted by:
airwolf
14 years ago
Ensure your login credentials have proper access on the system to access the ADMIN$ share. Also, disable any firewall that may be running.
Comments:
-
If this machine is not on a domain, then a registry edit is needed to permit remote access by local admins to the ADMIN$ share. Here are some details.
http://support.adminarsenal.com/entries/20828513-can-t-access-the-admin-using-a-local-user-account - flickerfly 12 years ago
Posted by:
KevinG
14 years ago
Make sure that the Simple File Sharing is turn off
Troubleshooting Agent Provisioning
http://www.kace.com/support/customer/faq/index.php?action=artikel&cat=2&id=1013&artlang=en
http://www.kace.com/support/customer/faq/index.php?action=artikel&cat=2&id=1013&artlang=en
Posted by:
r00tux
14 years ago
Thanks guys, while demoing the KACE 1100, the agent was deployed to a few systems. It was these computers failing on step 3. We ended up just removing the old instance and then provisioning the agent out again.
Posted by:
flickerfly
12 years ago
A little something extra that may be helpful to someone trying to install the client on non-domain machines:
I had to run this registry edit to enable remote local admin access to ADMIN$ found here: http://support.adminarsenal.com/entries/20828513-can-t-access-the-admin-using-a-local-user-account
cmd /c reg add HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\system /v LocalAccountTokenFilterPolicy /t REG_DWORD /d 1 /f
Posted by:
brucegoose03
12 years ago
Also be sure to check NTLM settings on your clients.
Provisioning only works through NTLM level 0-4, it will not work if set to "Send NTLM v2 only, refuse LM & NTLM" which is level 5.
Rating comments in this legacy AppDeploy message board thread won't reorder them,so that the conversation will remain readable.