-
Title
Application Launcher profile elements showing access is denied in SLTrace file -
Description
Application Launcher profile elements show an error message in SLTrace.htm file: "Return Code: [5] Access is denied."
This can occur intermittently and not with all elements.
-
Cause
This type of issue may start when the password for the Administrative Service Account is changed or if the new password is not yet replicated thru the whole domain. -
Resolution
There are several things that can be done to solve this behavior.Permissions on the shared folder: The first thing that is to be checked is if the Domain User account (or any other account used for the Administrative Service) has the proper permissions to access the shared folder that is being used for the Application Launcher element. This account should have at least read permissions on the "Sharing" tab of the folder properties and Read & Execute permissions on the "Security "tab.
Check the user Administrative Service credentials on all domain controllers: If there are more than one Domain Controller under Service Management tab in the Console, all of them should be using exactly the same credentials for the Domain Admin and Domain User accounts on the Administrative Service. A slight difference on any account may cause that some users are pointed out to the wrong service credentials, or that users will be logged in with an account that has been disabled on the Active Directory, it will either lock or disable the account in Active Directory.