/build/static/layout/Breadcrumb_cap_w.png

K1000 Provisioning with local admin or domain admin ?

Hi,

I am having a bad time trying to understand what is going on with my new Kace.
Just trying to do some provisioning on Windows computers in my domain and when I use a credential with domain prefix, the installation failed due to "access is denied". I guess UAC is part of the answer like it is said in other subject.
But if I put instead the local admin for credential, it works just fine. Why is that ?

Fell free to ask for any details on my configuration.

1 Comment   [ + ] Show comment

Answers (2)

Posted by: SMal.tmcc 7 years ago
Red Belt
1
double check to make sure that user is a member of the local administrators group or a domain group that is.  could be a gpo is not applying that makes the domain admins - local admins, that has happened here with Windows 10.

are you using this format for your credentials?




Comments:
  • Normaly when we create an admin for the domain, he is automaticaly considered as a local admin, I mean its also one of the purpose of the domain admin right ?

    Yes I am using this format.
    I tried : "tmccadmn\adminuser" and also just "adminuser" to be sure. both returns the same issue. - Horakiel 7 years ago
    • that needs to be your DomainName\user - SMal.tmcc 7 years ago
    • the domain user that becomes a local admin automatically works as long as the security groups are applied properly. - SMal.tmcc 7 years ago
Posted by: SMal.tmcc 7 years ago
Red Belt
0
say I have a user desktopmanager in the domain.
I check the local machine and this is the security applied by the domain GPO's



If desktopmanager is not a member of 1 of the 3 groups noted above he has no admin rights.

if he is a member of one these groups I can use tmccadmn\desktopmanager for the credentials username to login with as an admin via kace

Comments:
  • And I agree for the login part. But what I do not understand is why UAC block the provisioning for a user that is member of one of those three groups and not for the local "Administrator" user. - Horakiel 7 years ago
    • Got the same pblm here, - gwir 6 years ago

Don't be a Stranger!

Sign up today to participate, stay informed, earn points and establish a reputation for yourself!

Sign up! or login

Share

 
This website uses cookies. By continuing to use this site and/or clicking the "Accept" button you are providing consent Quest Software and its affiliates do NOT sell the Personal Data you provide to us either when you register on our websites or when you do business with us. For more information about our Privacy Policy and our data protection efforts, please visit GDPR-HQ