-
Title
PAM Essentials Directory connection fails with error access is denied -
Description
The Directory connection was failing after the service account password change was attempted by Pam Essentials.
Repairing the service account where an admin user provides credentials to repair the service account password allows the Directory connection to be successful initially but later the directory connection fails again.
The Directory Check System task log shows the following error:
Check system failed: Connecting to remote server {Proxy_IP_Address} failed with the following error message : Access is denied. For more information, see the about_Remote_Troubleshooting Help topic.
-
Resolution
1. Ensure that the directory service account is not disabled or locked. Validate the "Logon Hours" and correct and that "Log On To" is set to "All Computers".
2. Ensure that the directory service account login to Domain Controllers is not being blocked by any environmental Local or Group Policy:
- Ensure that the directory service account is listed in Computer Configuration | Windows Settings | Security Settings | Local Policies | User Rights Assignment | "Access this computer from the network"
- Ensure the the directory service account is NOT specified in Computer Configuration | Windows Settings | Security Settings | Local Policies | User Rights Assignment | "Deny access to this computer from the network"