Unable to access the computer (computer). The error was: Access Denied

[ScottHorizon]

I am running a domain based network managed by Small Business Server 2003 SP2. Client computers are running Windows XP Pro SP3.

Half of our machines function as they should.

The other half are returning the error:

"Unable to access the computer (computer). The error was: Access is Denied."

The error is appearing when I remotely access any of the system tools through Server Management.

The machines all ping okay.

 

[vacunita]

Are the non-working half logging in correctly to the domain?

Does the user you are using the Management console as have Admin privileges on these computers?

Is the WMI service running on these computers?

Can you Browse these computers through the network?

Any relevant errors in the Event Viewer of the computers, and the server?

----------------------------------
Phil AKA Vacunita
----------------------------------
Ignorance is not necessarily Bliss, case in point:
Unknown has caused an Unknown Error on Unknown and must be shutdown to prevent damage to Unknown.

Behind the Web, Tips and Tricks for Web Development.

http://behindtheweb.blogspot.com/

 

[ScottHorizon]

Are the non-working half logging in correctly to the domain?

* Everybody is logging in correctly.

Does the user you are using the Management console as have Admin privileges on these computers?

* Privileges on all machines are identical.

Is the WMI service running on these computers?

* How would I check this?

Can you Browse these computers through the network?

* All of the computers show up on the server as client computers. I just can't manage some of them.

Any relevant errors in the Event Viewer of the computers, and the server?

*I could not find anything in the Event Viewer pertaining to the error.

 

[vacunita]

Is the WMI service running on these computers?

* How would I check this?

Go to Control Panel -> Administrative Tools -> And look for the WMI service there. Is it Started? If not can you Start it?

Can you Browse these computers through the network?

* All of the computers show up on the server as client computers. I just can't manage some of them.

Not what I asked. Can you use Windows Explorer to browse the Network and these computers if they have anything shared.

Also any differences in firewall setup amongst these computers. Can you turn them (firewalls) off just for testing purposes?

Any Group Policies being applied to these Computers that may be disabling Remote Management.

Also quoting from Microsoft's Technet:

To troubleshoot remote errors

1.

Check whether the user has access to the remote computer. From the command prompt, execute the following command:

net user \\< remotecomputer >\\C$ /u:< domain\username > *
2.

Enable the verbose logging level on the remote computer and re-run the script. After running the script, examine the logs on the remote machine (%windir%\system32\wbem\Logs\).
3.

Enable audit events to determine which account is responsible for the failed connection. After auditing has been enabled, you will see events similar to this in the event log:

Event Type: Failure Audit

Event Source: Security

Event Category: Logon/Logoff

Event ID: 529

Date: 6/14/2004

Time: 10:52:35 AM

User: NT AUTHORITY\SYSTEM

Computer: <remote machine>

Description:

Logon Failure:

Reason: Unknown user name or bad password

User Name: xuser

Domain: NTDEV

Logon Type: 3

Logon Process: NtLmSsp

Authentication Package: MICROSOFT_AUTHENTICATION_PACKAGE_V1_0

Workstation Name: <console Machine >

http://technet.microsoft.com/en-us/library/ee692772.aspx

----------------------------------
Phil AKA Vacunita
----------------------------------
Ignorance is not necessarily Bliss, case in point:
Unknown has caused an Unknown Error on Unknown and must be shutdown to prevent damage to Unknown.

Behind the Web, Tips and Tricks for Web Development.

http://behindtheweb.blogspot.com/

 

[ScottHorizon]

Thanks so much with your help with all of this...

* Yes, WMI is running

* No, I can not browse the machines that are giving me the error. I am told I do not have the proper permissions.

* The command above

"net user \\< remotecomputer >\\C$ /u:< domain\username > *"

is not working for me when I fill in the appropriate information.

*I have Windows firewall completely disabled on these machines.

 

[ScottHorizon]

UPDATE:

I was able to get the command to work, but i received a "System Error 67". The network name can not be found.

 

[vacunita]

* No, I can not browse the machines that are giving me the error. I am told I do not have the proper permissions.

So we may be down to a Permissions issue.

However:

"System Error 67". The network name can not be found.

Points in a different direction. Second However Microsofts suggested solution here:

http://support.microsoft.com/kb/843156

Implies that all the computers on the network would be affected. Not just half.

Just to confirm the "Windows Instrumentation Management" (WMI) Service is running. Not to be confused with the WMI Performance Adapter Service.

Also make sure the "Workstation" service is running on the computers.

You might want to check the items mentioned here as well:

http://www.chicagotech.net/troubleshooting/systemerror67.htm

----------------------------------
Phil AKA Vacunita
----------------------------------
Ignorance is not necessarily Bliss, case in point:
Unknown has caused an Unknown Error on Unknown and must be shutdown to prevent damage to Unknown.

Behind the Web, Tips and Tricks for Web Development.

http://behindtheweb.blogspot.com/

 

[ScottHorizon]

Can we troubleshoot the permissions issue first, as that is possibly the most likely? Thanks!

 

[vacunita]

O.k. For the Permissions side:

Check that the user as which you are logged in to the server is present in the affected computers and has no overriding permissions set by any group policy.

Also to Start->Run and Type in "control userpasswords2"

Without the quotes, and with the space between control and userpasswords2.

Make sure the user, or administrator user form the server is present there for the affected machines. If its not there attempt to add it in.

----------------------------------
Phil AKA Vacunita
----------------------------------
Ignorance is not necessarily Bliss, case in point:
Unknown has caused an Unknown Error on Unknown and must be shutdown to prevent damage to Unknown.

Behind the Web, Tips and Tricks for Web Development.

http://behindtheweb.blogspot.com/

 

[ScottHorizon]

Yes, the machines do have an Administrator permission present.

 

[vacunita]

Sure its the domain Admin, and not just the local Admin?

Can you Browse the server from one of the affected machines?

How about dropping from and Re-joining one of the affected machines to the domain?

Any Per Machine settings being applied from the Domain?





----------------------------------
Phil AKA Vacunita
----------------------------------
Ignorance is not necessarily Bliss, case in point:
Unknown has caused an Unknown Error on Unknown and must be shutdown to prevent damage to Unknown.

Behind the Web, Tips and Tricks for Web Development.

http://behindtheweb.blogspot.com/