Submit a ticketCall us

Training ClassThe Orion® Platform Instructor-led Classes

Provided by SolarWinds® Academy, these trainings will introduce users to the Orion Platform and its features, management, and navigation. These courses are suitable for users looking to discover new tips, tricks, and ways to adapt their Orion products to better suit their monitoring needs:
Deploying the Orion Platform
Configuring Orion views, maps, and accounts
Configuring Orion alerts and reports

Reserve your seat.

Home > Success Center > Patch Manager > Patch Manager - Knowledgebase Articles > Troubleshoot "Access Denied" errors in Patch Manager

Troubleshoot "Access Denied" errors in Patch Manager

Updated September 20, 2018

Overview

This article describes how to troubleshoot Access Denied error messages when trying to connect Patch Manager to a remote computer.

These errors occur when deploying updates to remote computers or executing other tasks on a remote computer—for example, when you open Computer Explorer.

Environment

All Patch Manager versions

Cause

Mounting or permissions issues.

Resolution

  1. Verify that you can ping the remote computer by name from the Patch Manager server.
  2. Verify that the account specified in the error is a local administrator account on the remote computer.
  3. Verify that you can connect to the remote computer's admin share with the account specified in the error. 
  4. Open a command prompt on the Patch Manager server.

  5. Run:

    net use z: \\remoteComputer\admin$ /user:domain\username password

    where:

    • remoteComputer is the remote computer's name.

    • domain is the domain for the account specified in the error.

    • username is the account specified in the error.

    • password is the password for the account specified in the error.

  6. If the command returns The server is not configured for remote administration, perform the following steps. Otherwise, go to step 7.

    1. Make sure the File and Print Sharing option is enabled on the remote computer by opening port 445 TCP/UDP on the computer's firewall for communication from the Patch Manager server.

    2. Make sure the group policy allows your account to access the computer from the network.

      Open the Group Policy editor and go to Computer configuration > Policies > Windows Settings > Security Settings > User Rights Assignment > Access this computer from the network.

  7. If the command returns Error 1326, configure the remote computer to use the Classic sharing and security model:
    1. Open the computer's Local Security Settings.

    2. Expand Local Policies, and then select Security Options.

    3. Select Network access: Sharing and security model for local accounts, and then click Action > Properties.

    4. Select Classic - local users authenticate as themselves from the menu, and then click OK.
  8. Rerun the net use command if necessary.

Check the WMI connection

Verify that you can make a WMI connection to the remote computer using wbemtest.

  1. Launch wbemtest.exe from the Patch Manager server using a command prompt or the Run dialog box.
  2. Click Connect.

    wmi-tester.png

  3. Complete the Connect window fields.

    connect-window2.png

    1. In the Namespace field, enter:
      \remoteComputer\root\default

      where remoteComputer is the remote computer's name.

    2. Enter the credentials for the account specified in the error in the Credentials section.
  4. Click Connect.

Troubleshoot the WMI connection to the remote computer

  1. Make sure the firewall on the remote computer is not blocking the connection.

    1. If you have the permissions, disable the firewall on the remote computer and test the connection again.

    2. Open the ports required to establish communication from the Patch Manager server to the remote computers.

  2. Enable DCOM on the remote computer.

    1. On the remote computer, launch dcomcnfg using a command prompt or the Run dialog box.

    2. In the navigation pane, expand Component Services > Computer and then click My Computer.

    3. Click the Action menu, and then select Properties.

    4. Click the Default Properties tab.

    5. Select Enable Distributed COM on this computer if necessary.

    6. Click OK.

  3. If the remote computer is not running Windows XP, you are finished.
    If the remote computer is running Windows XP, disable the simple file sharing option. 

    1. Click Start > My Computer on the remote computer.

    2. Click the Tools menu, and then select Folder Options.

    3. Click View.

    4. Under Advanced settings, clear Use simple file sharing (Recommended) at the bottom of the list.

    5. Click OK.

Last modified

Tags

Classifications

Public