Windows Discovery/Add Workload fails with 'Access Denied'

  • 7920730
  • 19-Jun-2006
  • 27-Apr-2012

Environment

PlateSpin Migrate
PlateSpin Protect
PlateSpin Forge

Situation

When attempting to discover or add a Windows workload, the discovery job fails with following error message:
 
Access Denied
 
 

Resolution

The following is a checklist of potential causes for this error and steps to resolve the issue:
 
1. Incorrect privileges for credentials provided.  The credentials must have administrator level privileges.  Ensure the user account has administrator privileges on the server in question.  This may be by belonging to the Domain Admins group, by belonging to a group that is a member of the local administrators group of the server, or by directly belonging to the local administrators group of the server. 
 
2. DCOM is not enabled on the server being discovered. DCOM must be enabled. To check DCOM on the source, follow these steps:

 

     i. Start > Run > dcomcnfg.

     ii. Depending on the OS:

 

         For Windows 2000:
 

         Click the Default Properties tab and make sure the 'Enable DCOM on this computer' checkbox is checked.

       

         For Windows XP/2003:
 
         Expand 'Component Services' > 'Computers' > 'My computer'. Right-click on 'My Computer' and click properties. Select the 'Default Properties' tab and make sure the 'Enable DCOM on this computer' checkbox is checked. If not, check it and reboot the server to enable DCOM.
 
3. The user account is set to change the password at the next logon. Ensure this option is not set in the user account.
 
4. The user account is set to use a smart card for interactive logon. Ensure this option is not set in the user account. If set, unselect this option or use an account that does not need a smart card.
 
5. The account has the 'account is sensitive and cannot be delegated' option checked. Ensure this option is not set in the user account. If set,  change the account in use or unselect this option.
 
6. The net logon service is not started on a machine joined to the domain.  Start the net logon service. If the subsequent attempt returns a “Specified network name is no longer available” wait a few moments and try again.