-
Title
Troubleshooting KACE 1000 Agent side related issue by performing a clean boot -
Description
When working with the K1000 Agent on Microsoft Windows operating systems, it is often useful to perform a clean boot when troubleshooting an issue on the client side. This article describes partial usage of the msconfig.exe utility for Microsoft Windows and how to block "Group Policy Inheritance" inside an Active Directory domain. -
Cause
Problems are typically related to Security Policies such as restricting access/authentication methods to file shares in the organization. There are other cases where it is becomes difficult to narrow down what is causing the problem on the client and troubleshooting can become a lengthy process. Other 3rd Party Windows Services are another typical cause for issues. -
Resolution
Use the following steps to clean boot one of the affected client devices running any supported Microsoft Windows operating system:
A) Blocking Group Policy Inheritance
1. Using i.e. the Active Directory Users and Computers management console (dsa.msc) create a new Organizational Unit (OU)
2. Move the affect Computer account in Active Directory into the newly created OU
3. Using the Group Policy Management Console (gpmc.msc) find and right-click the newly created OU and choose "Block inheritance"
NOTE: Group Policies can be configured for Computers and Users but statistics show that Computer related Group Policies are most often the culprit.3. Either reboot the affected client device now or proceed to the next step which includes a reboot
B) Disabling all 3rd Party Windows Services using msconfig.exe
1. Using the Start Menu or the command line, run msconfig.exe
2. Inside the msconfig.exe utility, click the "Services" tab
3. On the bottom left, check the "Hide all Microsoft services" checkbox
4. On the bottom right, click the "Disable All" button
5. Since KACE is a 3rd Party from Microsoft perspective, re-enable all KACE related services
NOTE: If step 5 is not performed, the client device will end up booting without KACE related services.
It is good to double-check if any other service is required: i.e. for remotely connecting to a machine (VNC, DameWare, etc.).
Microsoft RDP should be used ideally for remote connections. Another thing to note is the Anti Virtus related services usually cannot be disabled this way and sometimes the last step to troubleshoot the issue might be to uninstall the Anti Virus solution for a test only.
6. Click the "Apply" and "Ok" button and eventually the "Restart" button to perform the clean boot
Example screenshot without 3rd Party services but KACE:
-
Additional Information
https://support.microsoft.com/en-us/kb/929135