Demo ADNM User, Can't Deploy

[Rollinthundr]

I have read plenty of logs on this issue, but after trying all of the fixes, I still can't deploy the client version of Avast to a workgrouped XP machine, in a MS SBS 2003 environment. I imported the users OK, everything seems fine, except for deploying.

The log is below, I'd like to get this working before I buy.


12/12/05 22:41:13:   rinstInstall begin
12/12/05 22:41:13:   Init 50 60 C:\WINDOWS\TEMP\aswCF1.tmp C:\Program Files\Alwil Software\Management Tools\InstPkgs NULL C:\WINDOWS\TEMP\aswCF0.tmp 0
12/12/05 22:41:14:   Store
12/12/05 22:41:14:   Domains: PATENT-LAW,
12/12/05 22:41:14:   Init PATENT-LAW\GDunn01
12/12/05 22:41:14:   GDunn01: GetAccount
12/12/05 22:41:14:   GDunn01: CallBack 201
12/12/05 22:41:14:   StartThread
12/12/05 22:41:14:   Loop
12/12/05 22:41:14:   SpawnThreads
12/12/05 22:41:14:   GDunn01: StartSetup
12/12/05 22:41:14:   GDunn01: CallBack 202
12/12/05 22:41:15:   GDunn01: WNetAddConnection2 \\GDunn01\C$ PATENT-LAW\avast error 1385
12/12/05 22:41:15:   GDunn01: WNetAddConnection2 \\GDunn01\ADMIN$ PATENT-LAW\avast error 1385
12/12/05 22:41:15:   GDunn01: RemoveOnError
12/12/05 22:41:15:   GDunn01: CallBack 211 C:\Program Files\Alwil Software\Management Tools\DATA\log\PATENT-LAW_GDunn01.log
12/12/05 22:41:15:   TerminateAll
12/12/05 22:41:15:   rinstInstall end 0

[Vlk]

Which account are you using for deployment?

C:\>net helpmsg 1385

Logon failure: the user has not been granted the requested logon type at this computer.


That is, the account probably does not have remote access right to the machine(s).

[Rollinthundr]

I am not sure I understand why though, the user I created is a member of the Domain Admins. I ran the Object Security Settings from aVast, and it says full control permission was granted.

Am I missing a setting for this user on Server 2003 SB?

[Vlk]

Is this a domain account (i.e. is PATENT-LAW domain name)? If so, grant the 'Access this computer from the network' right to it (e.g. in Administrative Tools->Domain Security Policy)

[Rollinthundr]

No dice getting it to work, although this is the problem. By default, the server Administrator should have this right (to remotely connect). If I do a simple \\clientname c$ I get a logon failure.

I realize this is outside the realm of this forum, but any idea why Administrator does not have all of his rights on this client?

[Vlk]

I have to ask the same questions again:

- is the Windows policy 'Access this computer from the network'  granted to the apropriate accounts (or groups)? Please note that for domain computers, there're actually 2 places this can be defined - on the domain controller (Domain Security Policy), and on the client machine itself (Local Security Policy).

- also a trivial question - aren't you using a firewall on the client machine? It might be blocking NetBIOS traffic...


Thanks
Vlk

[Rollinthundr]

I am still unsure of that particular client, but I did get another to work just fine. Soooo, our problem, not yours. Thanks for the responses.

[Rollinthundr]

It seems as though this particular PC is not getting the Group Policies from the domain for some reason. There are lots of posts on that, but this problem is evident in the System logs.

[Rollinthundr]

The user installed some sort of registry monitoring program. Man that was a pain to figure out!

[Vlk]

Which program was it exactly, by the way...?

[Rollinthundr]

Honestly, I can't remember. I was so frustrated I just took it off.

Another troubleshooting tip to add to your arsenal.