-
Titre
Unable to discover workstation error "Error 0x80070005. Access denied." -
Description
Unable to discover workstation when attempting to process it using Resource Updating Manager (RUM) Console.
The following error is listed within the workstation log which cannot be discovered:
Date/Time UTC +00:00 6124, LOCATION
Date/Time RUM SERVER 6124, Windows Server 2003 R2, Standard Edition, Build 3790, Service Pack 2
Date/Time 6124 ======================================= =========================================
Date/Time 6124 Executing discovery operation.
Date/Time Starting 6124 for computer discovery: WORKSTATION.
Date/Time 6124 Adding net use connection to WORKSTATION account using Domain\svc_qmm.
Date/Time 6124 Agent not installed, Will Try to install.
Date/Time RUM 6124 Installing agent on host WORKSTATION.
Date/Time RUM 6124 Checking agent status.
Date/Time 6124 Connecting to host it WORKSTATION SCM.
Date/Time 6124 Error 0x80070005. Access denied.
Date/Time 6124 Removing net use connection to WORKSTATION. -
Cause
This issue could be down to a number of environmental reasons, which include insufficient permissions or connectivity as well as time difference of the workstation that trying to authenticate to the domain controllers
-
Résolution
1. Ensure the RUM Controller service account (specified in RUM Console, 'Project | Manage Controller Credentials') is a member of Administrators group on the workstation. To test:
a. Login to the Migration Manager console machine as the RUM Controller service account .
b. Go to Windows Services, or type Service.msc in the Search programs and files from the Start Menu.
c. Connect to workstation in question and try to stop and start the 'Quest Resource Updating Agent' service (or any other service, if this service is not present).2. Ensure the RUM Agent service accounts (specified in RUM Console, 'Project | Manage Controller Credentials') have Full Control over the workstation. The Domain Admins group does not necessarily assure that this permission is set, as many administrators remove this group from the Local Administrators group on the workstation.
Also add the domain credentials in FQDN and shortname (NETBIOS) domain prefix to the username. For example, under "Domain Credentials", add the following:
- software.quest.com\username
- software\username
3. Ensure the following services are running both on the console and the workstation:
- Remote Registry service .
- Server Service.
4. Ensure that you can ping the console and workstation via both short and FQDN names.
5. Ensure you can map to the admin$ share on the workstation.
6. Ensure the name resolution resolve to the correct Workstation by running PING command from the RUM Server with the workstation NETBIOS name.
7. Ensure the workstation time is being updated by the Domain Controller properly to match each other. This is typically automatic unless something is interfering. If the clock is not within 5 minutes of its authenticating domain controller - Kerberos authentication with fail and the ACCESS DENIED message may be received.
Contact support if all of the above works as expected and the "Access denied" error is still being received within the log file.