Zurück
-
Titel
Error: "Unable to log in to the asset using account user@yourdomain.com" -
Beschreibung
Error: "Unable to log in to the asset using account user@yourdomain.com" when attempting to Change a password on a Active Directory directory.
Reviewing the output from the "Operation" logs shows the error:Friday, September 21, 2018 4:26:54 PM Debug Invoking SetPassword for "user" as "service_account@yourdomain.com"Friday, September 21, 2018 4:26:55 PM Warning ExceptionSystem.Reflection.TargetInvocationException: Exception has been thrown by the target of an invocation. ---> System.UnauthorizedAccessException: Access is denied.
"Check Connection" on the Directory and "Check Password" on the account can be completed successfully.. -
Lösung
Ensure the Service Account has been granted the correct permissions to reset passwords. Information on permissions is available here under Domain password managementPermissions can be validated outside of Safeguard by performing the following:1. Install RSAT tools :
2. Run this command to reset the password for the user, replacing username with the managed account and domainname. Enter the service account credentials at the popup prompt.Set-ADAccountpassword -Credential Get-Credential -Server "domainnamehere" -identity "username" -Reset -NewPassword (ConvertTo-SecureString -AsPlainTest "NewPassword" -FORCE)