| Author |
Message |
Marco
Guest
|
 Posted:
Tue Mar 08, 2005 11:47 pm Post subject:
Access Denied (Local System on Windows XP) |
|
|
Hi all,
I am using the local system account and I am getting a bunch of errors that
say Access Denied. How is that possible?
Description:
The response processor was denied to execute a response. The action
account the MOM Agent is using doesn't have enough privileges. Returned
error message: Access is denied.
Response Details:
Rule ID: {CD2E9C44-6CDB-4224-98D5-484E145C27EB}
Response description: script: {EF52B41E-6911-4E78-8198-316FDED88564}
Domain: NEXINNOVATIONS
Computer: MISALMON01
Time: 08/03/2005 12:33:57 PM
Type: Warning
Provider Name: Application
Event Number: 21294
Provider Type: Event Log
Source: Microsoft Operations Manager
Category: MOM Agent
Raises Alert: True
Consolidated:
From:
To:
Event Id: b04d46b1-b85f-4690-866e-000b50957b59 |
|
| Back to top |
|
 |
Kevin Beares [MSFT]
Guest
|
| Posted:
Fri Mar 25, 2005 6:46 am Post subject:
Re: Access Denied (Local System on Windows XP) |
|
|
Hi Marco,
Since I don't have all the Rule GUID's memorized. ;) Can you tell me what
rule fired this alert and what the event id was? Maybe we could figure it
out with this additional info.
--
Thanks,
Kevin Beares
MOM Community PM
--
This posting is provided "AS IS" with no warranties, and confers no rights.
OR if you wish to include a script sample in your post please add "Use of
included script samples are subject to the terms specified at
http://www.microsoft.com/info/cpyright.htm"
"Marco" <nope@nobody.com> wrote in message
news:uJeRgbAJFHA.2640@TK2MSFTNGP09.phx.gbl...
| Quote: | Hi all,
I am using the local system account and I am getting a bunch of errors
that
say Access Denied. How is that possible?
Description:
The response processor was denied to execute a response. The action
account the MOM Agent is using doesn't have enough privileges. Returned
error message: Access is denied.
Response Details:
Rule ID: {CD2E9C44-6CDB-4224-98D5-484E145C27EB}
Response description: script: {EF52B41E-6911-4E78-8198-316FDED88564}
Domain: NEXINNOVATIONS
Computer: MISALMON01
Time: 08/03/2005 12:33:57 PM
Type: Warning
Provider Name: Application
Event Number: 21294
Provider Type: Event Log
Source: Microsoft Operations Manager
Category: MOM Agent
Raises Alert: True
Consolidated:
From:
To:
Event Id: b04d46b1-b85f-4690-866e-000b50957b59
|
|
|
| Back to top |
|
|
Marco
Guest
|
| Posted:
Tue Mar 29, 2005 10:47 pm Post subject:
Re: Access Denied (Local System on Windows XP) |
|
|
This is a custom rule that executes a VBS script that runs a WMI query. The
query is to see how many of a particular process is running.
Also I get a similar error when I try to reboot. The funny thing is
sometimes it works and sometimes it doesn't. Very frustrating.
Any thoughts?
BTW...it is running as local system.
Regards,
Marco
"Kevin Beares [MSFT]" <kbeares@online.microsoft.com> wrote in message
news:%23TurC8PMFHA.3420@tk2msftngp13.phx.gbl...
| Quote: | Hi Marco,
Since I don't have all the Rule GUID's memorized. ;) Can you tell me what
rule fired this alert and what the event id was? Maybe we could figure it
out with this additional info.
--
Thanks,
Kevin Beares
MOM Community PM
--
This posting is provided "AS IS" with no warranties, and confers no
rights.
OR if you wish to include a script sample in your post please add "Use of
included script samples are subject to the terms specified at
http://www.microsoft.com/info/cpyright.htm"
"Marco" <nope@nobody.com> wrote in message
news:uJeRgbAJFHA.2640@TK2MSFTNGP09.phx.gbl...
Hi all,
I am using the local system account and I am getting a bunch of errors
that
say Access Denied. How is that possible?
Description:
The response processor was denied to execute a response. The action
account the MOM Agent is using doesn't have enough privileges. Returned
error message: Access is denied.
Response Details:
Rule ID: {CD2E9C44-6CDB-4224-98D5-484E145C27EB}
Response description: script:
{EF52B41E-6911-4E78-8198-316FDED88564}
Domain: NEXINNOVATIONS
Computer: MISALMON01
Time: 08/03/2005 12:33:57 PM
Type: Warning
Provider Name: Application
Event Number: 21294
Provider Type: Event Log
Source: Microsoft Operations Manager
Category: MOM Agent
Raises Alert: True
Consolidated:
From:
To:
Event Id: b04d46b1-b85f-4690-866e-000b50957b59
|
|
|
| Back to top |
|
|
Kevin Beares [MSFT]
Guest
|
| Posted:
Tue May 17, 2005 12:52 am Post subject:
Re: Access Denied (Local System on Windows XP) |
|
|
Have you tried changing the credentials of the agent to run as a local admin
that is also a domain user?
--
Thanks,
Kevin Beares
MOM Community PM
You may log a bug or Feature Request directly to the MOM Product Team by
going to http://www.microsoft.com/mom/feedback. This posting is provided "AS
IS" with no warranties, and confers no rights. Use of any included script
samples are subject to the terms specified at
http://www.microsoft.com/info/cpyright.htm
"Marco" <nope@nobody.com> wrote in message
news:O$bjjSJNFHA.2704@TK2MSFTNGP15.phx.gbl...
| Quote: | This is a custom rule that executes a VBS script that runs a WMI query.
The
query is to see how many of a particular process is running.
Also I get a similar error when I try to reboot. The funny thing is
sometimes it works and sometimes it doesn't. Very frustrating.
Any thoughts?
BTW...it is running as local system.
Regards,
Marco
"Kevin Beares [MSFT]" <kbeares@online.microsoft.com> wrote in message
news:%23TurC8PMFHA.3420@tk2msftngp13.phx.gbl...
Hi Marco,
Since I don't have all the Rule GUID's memorized. ;) Can you tell me
what
rule fired this alert and what the event id was? Maybe we could figure it
out with this additional info.
--
Thanks,
Kevin Beares
MOM Community PM
--
This posting is provided "AS IS" with no warranties, and confers no
rights.
OR if you wish to include a script sample in your post please add "Use of
included script samples are subject to the terms specified at
http://www.microsoft.com/info/cpyright.htm"
"Marco" <nope@nobody.com> wrote in message
news:uJeRgbAJFHA.2640@TK2MSFTNGP09.phx.gbl...
Hi all,
I am using the local system account and I am getting a bunch of errors
that
say Access Denied. How is that possible?
Description:
The response processor was denied to execute a response. The
action
account the MOM Agent is using doesn't have enough privileges. Returned
error message: Access is denied.
Response Details:
Rule ID: {CD2E9C44-6CDB-4224-98D5-484E145C27EB}
Response description: script:
{EF52B41E-6911-4E78-8198-316FDED88564}
Domain: NEXINNOVATIONS
Computer: MISALMON01
Time: 08/03/2005 12:33:57 PM
Type: Warning
Provider Name: Application
Event Number: 21294
Provider Type: Event Log
Source: Microsoft Operations Manager
Category: MOM Agent
Raises Alert: True
Consolidated:
From:
To:
Event Id: b04d46b1-b85f-4690-866e-000b50957b59
|
|
|
| Back to top |
|
|
Marco
Guest
|
| Posted:
Thu May 19, 2005 4:54 pm Post subject:
Re: Access Denied (Local System on Windows XP) |
|
|
Yes.
However, I have decided for now not to deploy for XP systems. I just
replaced the XP box with a Windows 2003 box which gives us a more reliable
platform anyways. So it will just cost us a bit more on licensing.
However, If you see my post on "Rebooting servers automatically" I am also
having issues with Windows 2003 and doing a reboot.
.....
"Kevin Beares [MSFT]" <Kbeares@online.microsoft.com> wrote in message
news:ODrjMBmWFHA.3716@TK2MSFTNGP12.phx.gbl...
| Quote: | Have you tried changing the credentials of the agent to run as a local
admin that is also a domain user?
--
Thanks,
Kevin Beares
MOM Community PM
You may log a bug or Feature Request directly to the MOM Product Team by
going to http://www.microsoft.com/mom/feedback. This posting is provided
"AS IS" with no warranties, and confers no rights. Use of any included
script samples are subject to the terms specified at
http://www.microsoft.com/info/cpyright.htm
"Marco" <nope@nobody.com> wrote in message
news:O$bjjSJNFHA.2704@TK2MSFTNGP15.phx.gbl...
This is a custom rule that executes a VBS script that runs a WMI query.
The
query is to see how many of a particular process is running.
Also I get a similar error when I try to reboot. The funny thing is
sometimes it works and sometimes it doesn't. Very frustrating.
Any thoughts?
BTW...it is running as local system.
Regards,
Marco
"Kevin Beares [MSFT]" <kbeares@online.microsoft.com> wrote in message
news:%23TurC8PMFHA.3420@tk2msftngp13.phx.gbl...
Hi Marco,
Since I don't have all the Rule GUID's memorized. ;) Can you tell me
what
rule fired this alert and what the event id was? Maybe we could figure
it
out with this additional info.
--
Thanks,
Kevin Beares
MOM Community PM
--
This posting is provided "AS IS" with no warranties, and confers no
rights.
OR if you wish to include a script sample in your post please add "Use
of
included script samples are subject to the terms specified at
http://www.microsoft.com/info/cpyright.htm"
"Marco" <nope@nobody.com> wrote in message
news:uJeRgbAJFHA.2640@TK2MSFTNGP09.phx.gbl...
Hi all,
I am using the local system account and I am getting a bunch of errors
that
say Access Denied. How is that possible?
Description:
The response processor was denied to execute a response. The
action
account the MOM Agent is using doesn't have enough privileges.
Returned
error message: Access is denied.
Response Details:
Rule ID: {CD2E9C44-6CDB-4224-98D5-484E145C27EB}
Response description: script:
{EF52B41E-6911-4E78-8198-316FDED88564}
Domain: NEXINNOVATIONS
Computer: MISALMON01
Time: 08/03/2005 12:33:57 PM
Type: Warning
Provider Name: Application
Event Number: 21294
Provider Type: Event Log
Source: Microsoft Operations Manager
Category: MOM Agent
Raises Alert: True
Consolidated:
From:
To:
Event Id: b04d46b1-b85f-4690-866e-000b50957b59
|
|
|
| Back to top |
|
|
Sonnet56
Guest
|
| Posted:
Thu Jun 30, 2005 2:00 pm Post subject:
Re: Access Denied (Local System on Windows XP) |
|
|
Hello,
Has anyone come up with any additional information for this behavior?
Thanks,
"Marco" wrote:
| Quote: | Yes.
However, I have decided for now not to deploy for XP systems. I just
replaced the XP box with a Windows 2003 box which gives us a more reliable
platform anyways. So it will just cost us a bit more on licensing.
However, If you see my post on "Rebooting servers automatically" I am also
having issues with Windows 2003 and doing a reboot.
.....
"Kevin Beares [MSFT]" <Kbeares@online.microsoft.com> wrote in message
news:ODrjMBmWFHA.3716@TK2MSFTNGP12.phx.gbl...
Have you tried changing the credentials of the agent to run as a local
admin that is also a domain user?
--
Thanks,
Kevin Beares
MOM Community PM
You may log a bug or Feature Request directly to the MOM Product Team by
going to http://www.microsoft.com/mom/feedback. This posting is provided
"AS IS" with no warranties, and confers no rights. Use of any included
script samples are subject to the terms specified at
http://www.microsoft.com/info/cpyright.htm
"Marco" <nope@nobody.com> wrote in message
news:O$bjjSJNFHA.2704@TK2MSFTNGP15.phx.gbl...
This is a custom rule that executes a VBS script that runs a WMI query.
The
query is to see how many of a particular process is running.
Also I get a similar error when I try to reboot. The funny thing is
sometimes it works and sometimes it doesn't. Very frustrating.
Any thoughts?
BTW...it is running as local system.
Regards,
Marco
"Kevin Beares [MSFT]" <kbeares@online.microsoft.com> wrote in message
news:%23TurC8PMFHA.3420@tk2msftngp13.phx.gbl...
Hi Marco,
Since I don't have all the Rule GUID's memorized. ;) Can you tell me
what
rule fired this alert and what the event id was? Maybe we could figure
it
out with this additional info.
--
Thanks,
Kevin Beares
MOM Community PM
--
This posting is provided "AS IS" with no warranties, and confers no
rights.
OR if you wish to include a script sample in your post please add "Use
of
included script samples are subject to the terms specified at
http://www.microsoft.com/info/cpyright.htm"
"Marco" <nope@nobody.com> wrote in message
news:uJeRgbAJFHA.2640@TK2MSFTNGP09.phx.gbl...
Hi all,
I am using the local system account and I am getting a bunch of errors
that
say Access Denied. How is that possible?
Description:
The response processor was denied to execute a response. The
action
account the MOM Agent is using doesn't have enough privileges.
Returned
error message: Access is denied.
Response Details:
Rule ID: {CD2E9C44-6CDB-4224-98D5-484E145C27EB}
Response description: script:
{EF52B41E-6911-4E78-8198-316FDED88564}
Domain: NEXINNOVATIONS
Computer: MISALMON01
Time: 08/03/2005 12:33:57 PM
Type: Warning
Provider Name: Application
Event Number: 21294
Provider Type: Event Log
Source: Microsoft Operations Manager
Category: MOM Agent
Raises Alert: True
Consolidated:
From:
To:
Event Id: b04d46b1-b85f-4690-866e-000b50957b59
|
|
|
| Back to top |
|
|
macallen
Joined: 28 Jul 2006
Posts: 2
|
| Posted:
Fri Jul 28, 2006 9:13 pm Post subject:
|
|
|
Forgive the cross post...
I'm having very similar problems. Here's my environment:
* MOM 2k5 SP1
* 600+ XPSP2 systems being monitored, all completely identical in every sense
* Agent is running as local system (default out of the box)
* MOM domain account (used to install the agent remotely) is a local Admin
On about 20% of my systems, I receive the following errors:
The response processor failed to execute a response. The response returned the error message: The handle is invalid. (rule info is a GUID that I don't recognize, occurs every 10 min)
The response processor failed to execute a response. The response returned the error message: The object exporter specified was not found. (as above, GUID and every 10 minutes)
The response processor was denied to execute a response. The action account the MOM Agent is using doesn't have enough privileges. Returned error message: Access is denied. (lists a CMD or script that it won't run, does this on several scripts, but not all, and occurs randomly...sometimes the script runs successfully, sometimes it does not)
Some systems get all 3, all the time. Some get them randomly. They have no local security policies, they are all controlled and locked down by a central GPO, they are all identical hardware, built from a Gold disk, etc. They're commodity systems, completely replacable by a new box in minutes.
This is baffling me, and any aid you can provide will be greatly appreciated. |
|
| Back to top |
|
|
|
|
|
|
FAQ
Memberlist
Register
Profile
Log in to check your private messages
Log in
