/build/static/layout/Breadcrumb_cap_w.png

NT_STATUS_ACCESS_DENIED error while provisioning K1000 agent on Win Vista/ Win 7/Win8/Win 2012

When you try to provision K1000 Agent on Windows Vista and later OS and get NT_STATUS_ACCESS_DENIED error while  accessing ADMIN$ share in the logs as below.

 

And you have access to ADMIN$ share, then the issue could be because of the security restrictions put on administrative share while accessing them remotely.

 

To workaround this issue, you have to add a registry key as described below

http://en.wikipedia.org/wiki/Administrative_share#How_to_enable_in_Windows_Vista.2C_Windows_7.2C_and_Windows_8

 

To enable administrative shares you have to make a registry change. Click on Start Menu and in the search box type ‘regedit’ and press ENTER. Add this registry item:

Hive: HKEY_LOCAL_MACHINE
Key: Software\Microsoft\Windows\CurrentVersion\Policies\System
Name: LocalAccountTokenFilterPolicy
Data Type: REG_DWORD
Value: 1

After rebooting, the hidden share is accessible from other computers. Note that this change removes Windows' restrictions on remote User Account Control.

You may be able to use 'net stop server' and then 'net start server' from an administrative command prompt instead of rebooting.

 


Comments

  • What type of access to the admin$ share is required to deploy the client through provisioning? - jkinwv17 2 years ago
  • Re you using an Admin account ? - AbhayR 2 years ago
This post is locked

Don't be a Stranger!

Sign up today to participate, stay informed, earn points and establish a reputation for yourself!

Sign up! or login

Share

 
This website uses cookies. By continuing to use this site and/or clicking the "Accept" button you are providing consent Quest Software and its affiliates do NOT sell the Personal Data you provide to us either when you register on our websites or when you do business with us. For more information about our Privacy Policy and our data protection efforts, please visit GDPR-HQ