-
Title
Error, "Unauthorized access, access denied Exception by HRESULT: 0x80070005 (E_ACCESSDENIED)" -
Description
"Check Connection" and "Test System" fails on Windows asset with "Unable to log in to the asset using service account service_account." error.
The event task displays the following error "Unauthorized access, access denied Exception by HRESULT: 0x80070005 (E_ACCESSDENIED)".
Sessions work without issue. -
Cause
The service account has been denied access by the target system.
-
Resolution
1/ Ensure the password set on the service account in Safeguard matches the password set on the target system
2/ Ensure that the service account has the correct permissions on the target system- A member of the local administrators
- Remote Enable permissions in the WMI CIMV2 namespace
- Enable Account permissions on the WMI CIMV2 namespace- COM Remote Security ActivationMore information on permissions is available here
3/ Ensure that the service account login is not being blocked via any environmental Local or Group Policy- Ensure Users or the specific service account is listed in Computer Configuration | Windows Settings | Security Settings | Local Policies | User Rights Assignment | "Access this computer from the network"- Ensure the user is NOT specified in Computer Configuration | Windows Settings | Security Settings | Local Policies | User Rights Assignment | "Deny access to this computer from the network"
4/ For workgroup machines, ensure the security policy Computer Configuration | Windows Settings | Security Settings | Local Policies | Security Options | "Network access: Sharing and security model for local accounts" is set to "Classical - local users authenticate as themselves"
5/ Ensure (UAC) User Account Control is disabled for the service account:
When using a local (non domain) administrator that is not the inbuilt administrator, ensure the policy Computer Configuration | Windows Settings | Security Settings | Local Policies | Security Options | "User Account Control: Run all administrators in Admin Approval Mode option." is disabled.
If using a local administrator that is the inbuilt administrator, ensure the policy Computer Configuration | Windows Settings | Security Settings | Local Policies | Security Options | "User Account Control: Admin Approval Mode for the Built-in Administrator account " is disabled
A reboot is required if UAC options are changed
Leave a Comment
- Product(s):
-
One Identity Safeguard
2.5.1, 2.5, 2.4, 2.3, 2.2, 2.1, 2.0.1, 2.0
- Topic(s):
- Troubleshooting
- Article History:
- Created on: 3/19/2018
Last Update on: 2/1/2019
- Author:
- Sergio Lema
- Search All Articles
-