ifly4fun
asked on
Remote Computer Management on a Domain: Unable to connect to computer ###### The error was: Access is Denied
I am trying to remote manage several Windows XP PC's on our Domain. I am a Domain admin and have privilages on all the PC's in question. When I open computer management and connect to the problem PC, I get access is denied for Event Viewer, Users, and a few others. I also cannot remote connect using RegEdt32. I know I have full permissions, as this problem is only recently appearing on existing machines and only a handful in our domain. Any help would be great!!!
Jeff
Jeff
You might have to go look locally at those machines. It's possible that if someone logged in with administrative rights they could have removed the Domain Admins group from the local Administrators group.
ASKER
I orginally thought this also, So I physically went to the PC to check that Domain Admins was still part of the local Administrators group. I should also add that I can perform all of these functions at the physical machine. I just can't do anything remotely.
Hmm, off hand I can only think of a few things that might affect that. Security policy settings such as the user right "Access this computer from the network" and security options "Remotely Accessible Registry Keys".
Maybe even the Remote Registry service being disabled in services.msc.
Maybe even the Remote Registry service being disabled in services.msc.
ASKER
Found my solution, had to contact MS PSS.
Add the Local System account to the below registry key: HKEY_LOCAL_MACHINE\SYSTEM\
For whatever reason, the permissions on this key did not have the local system account on the problematic machine. We are still researching why this happened, however, this fixes the issue.
Add the Local System account to the below registry key: HKEY_LOCAL_MACHINE\SYSTEM\
For whatever reason, the permissions on this key did not have the local system account on the problematic machine. We are still researching why this happened, however, this fixes the issue.
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Had a similar problem -- it turned out that Simple File Sharing was enabled. Symptoms of this include the above problem, not being able to access C$ shares and network tools such as pstools/psexec/pskill all failing with access denied. Disabling simple file sharing solved it for me.
I was having the same issue with Windows XP machines that were upgraded and not clean installed. This is what worked for me.
Add the LOCAL SERVICE account to the below registry key: HKEY_LOCAL_MACHINE\SYSTEM\
Add the LOCAL SERVICE account to the below registry key: HKEY_LOCAL_MACHINE\SYSTEM\
I was experiencing this problem and it turned out the fix was pretty easy. Just not what you'd expect.
Double check your Windows Time service on the problem PCs and the set time. Once the time was synched on them, remote management kicked right in.
Double check your Windows Time service on the problem PCs and the set time. Once the time was synched on them, remote management kicked right in.