Unable to install agents on domain controllers running Microsoft Windows Server 2003. (NETIQKB36744)

fact
Directory and Resource Administrator 7.x

fact
Microsoft Windows Server 2003

symptom
Unable to install agents on domain controllers running Microsoft Windows Server 2003.

cause
The Default Domain Controller group policy object has LOCAL SERVICE and NETWORK SERVICE added to the "Impersonate client after authentication" policy setting.

fix

 In Microsoft Windows Server 2003, check to see if LOCAL SERVICE and NETWORK SERVICE were added to the "Impersonate client after authentication" setting in the Default Domain Controller policy. 

Please use the following steps to determine if these accounts have been added:

1. Go to Start | All Programs | Administrative Tools | Domain Security Policy.
2. From the Default Domain Security Settings MMC, expand Local Policies.
3. Highlight User Rights Assignment and double click on "Impersonate a client after authentication".
4. If you see LOCAL SERVICE and NETWORK SERVICE listed remove them and try installing the agents again.

 

note
Warning: Please consult with your IT Supervisor/Manager before making any modifications to the configuration of a domain controller, as such changes may produce adverse effects within your environment. NetIQ Technical Support cannot be held responsible for any problems that may arise from these changes.

Formerly known as NETIQKB36744