Error -672 during manual execution of ZWSREG for Workstation Import and/or Update

  • 3294734
  • 03-Jan-2008
  • 25-May-2012

Environment

Novell ZENworks for Desktops 4.0.1 - ZfD4.0.1
Novell ZENworks for Desktops 4.0.1 - ZWSREG.EXE
Novell ZENworks 6.5 Desktop Management - ZWSREG.EXE
Novell ZENworks 7 Desktop Management - ZWSREG.EXE
Novell ZENworks Automatic Workstation Import
Novell ZENworks 6.5 Desktop Management - ZDM6.5 Automatic Workstation Import
Novell ZENworks 7 Desktop Management - ZDM7 Automatic Workstation Import

Situation

Error -672 during manual execution of ZWSREG for Workstation Import and/or Update zenwsreg.log file has
" -- ZENWSREGRegister -- Leaving Registrar::Update, returning -672"
Troubleshooting Workstation Import for regular users and seeing errors in zwsreg.log
No error occurs when authenticated as Admin equivalent
Workstation Import Service is running and working correctly
Workstation Imports and Updates during normal Startup without error recorded in the zwsreg.log file

Resolution

This is working as designed.

Additional Information

The error is expected for regular (Non-Admin) users

Running ZWSREG.EXE will Import, Register and Update workstation objects during startup. The Import and Registration process send the details to the Import Server which completes those processes in eDirectory. The Update process communicates directly with eDirectory to update the Workstation object. When ZWSREG.EXE executes normally during the workstation startup or a user login process, it is executing with the Workstation Credentials which has the required rights to modify the own Workstation object. This allows the Update process to complete correctly.

When ZWSREG.EXE is executed manually at a command prompt it is executing with the logged in users's credentials. The user requires the rights to modify the Workstation object to allow the Update process to complete without error.

When the logged in user is an Admin Equivalent the process has the required rights and is able to update the Workstation Object and with no error occurring.

When the logged in user is a regular user that does not have the rights to modify the Workstation Object, the error -672 (Insufficent Rights) will occur during the Update Process. The Import and Registration process will complete without error as those processes occur through the Import Server.

The following are example log entries at end of zwsreg.log file when running zwsreg.exe as a normal user (with no Admin equivalent previledges) showing the reported error:

Wednesday, October 13, 2004 12:01:29 -- ZENWSREGRegister -- Leaving Registrar::Update, returning -672
Wednesday, October 13, 2004 12:01:29 -- ZENWSREGRegister -- Leaving Registrar::Register, returning 0
Wednesday, October 13, 2004 12:01:29 -- ZENWSREGRegister -- Leaving ZENWSREGRegister, returning 0

Note: the above explanation assumes that the Workstation Import service is used for Import and Registration. If the ImportServer=none option is configured, then all steps of the process require the logged in user have the required rights to create and update the Workstation Object.

Formerly known as TID# 10095066
Formerly known as NOVL99381