Hi there...

This is an insufficient privileges issue. From the error message it looks like the user account does not have permission to execute a file on remote machine.

The OMSA Deploy task user should have following access rights on the target:

- User should be an administrator of the machine

- User should have read, write and execute access under windows temp directory

Does this help?

Thanks,

Rob

Thanks for your reply, Rob.

Unfortunatly that doesn't help as our Domain Admins are Local Administrators as well and they have full access to the disk.

Thanks!

Quick update:

It seems we've narrowed the problem down to remote sites domain controllers.

Thanks!

Good to know.  Please keep us posted.  This info can be useful for other folks as well.

Rob

I will keep the thread up-to-date with findings. However, if you guys think of something that might be the issue, please let me know.

Thanks!

We finally have a solution to this problem.

Do the following on target:

 

Run secpol.msc:

Impersonate a client after authentication

Accounts:

-Local Service

-Network Service

Replace a process level token:

Accounts:

-Local Service

-Network Service

Create global objects:

Accounts:

-Local Service

-Network Service

----------------------------------------------------------------------------------------

Windows 2003, from CMD prompt:

net stop winmgmt

rundll32 wbemupgd, RepairWMISetup

cd /d %windir%\system32\wbem

for %i in (*.dll) do RegSvr32 -s %i

for %i in (*.exe) do %i /RegServer

For Windows 2008:

Net stop winmgmt

winmgmt /slavagerepository

cd /d %windir%\system32\wbem

for %i in (*.dll) do RegSvr32 -s %i

for %i in (*.exe) do %i /RegServer

Hope this helps,

cshelley92

Thanks for this detail.  I'll look to see if we need to add a new FAQ.

Regards,

Rob