SecureLogin fails to Load after group policy modification

  • 3614237
  • 28-Sep-2006
  • 26-Apr-2012

Environment


Novell SecureLogin 6.0 Client
Novell ZENworks for Desktops 4.0.1 - ZfD4.0.1 Desktop Management

Situation

After modifying a group policy through ConsoleOne using Zen 4.01, SecureLogin errors out on load with the following error.

"Unable to instantiate ScriptBroker module: 80070005".




Resolution

This is caused by a corrupt group policy. In most cases, there was an option "impersonate a client after authentication" which has lost the service ACL. By default, it should be Administrators and Service.

Please see the following URL for more information on how to resolve this condition:

http://technet2.microsoft.com/WindowsServer/en/library/fe1fb475-4bc8-484b-9828-a096262b54ca1033.mspx?mfr=true)



Additional Information

This issue can be easily identified by looking at services, and if the dependencies tab returns a "Win32: Access Denied" error; the above stated issue could be the root cause.

Also, a group policy editor on the machine can be used to check if the ACL is correct. One confirmed case showed that every machine had a SID number where SERVICE should have been.