Return
-
Title
Cannot add physical machine to inventory when using local administrator account -
Description
- The physical machine has a Windows 2008R2, 2012R2 or 2016 OS.
- The physical machine has joined a domain.
- The machine gets installed and added successfully when using a domain administrator account.
- The local user account password has been correctly set and tested.
- The firewall has been correctly configured.
- When adding a physical machine to inventory, it fails with the following message when using a local administrator account:
Login Failed for user . Please verify the username and password
-
Cause
This is caused by the UAC remote restriction, which prevents local users to gain elevated privileges. When the remote UAC is enabled and the server has joined the domain, it allows local users who belong to the local administrator group to connect, but the users won't connect as full administrators. Due to this, these users cannot gain elevated privileges to perform administrative tasks.
For more information, refer to the Microsoft Article ID 951016.
-
Resolution
To disable the remote UAC, an entry will need to be made in the registry of the affected target computer:- Navigate to HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System
- Create a DWORD value called LocalAccountTokenFilterPolicy and assign it a value of 1.
A reboot is recommended after creating the entry.Windows Registry Disclaimer:Quest does not provide support for problems that arise from improper modification of the registry. The Windows registry contains information critical to your computer and applications. Make sure you back up the registry before modifying it. For more information on the Windows Registry Editor and how to back up and restore it, refer to Microsoft Article ID 256986 "Description of the Microsoft Windows registry" at Microsoft Support.