SAM Server 2012 R2 access fails test ??

Hello Forum,

I'm using a local Windows account to try to monitor a 2012R2 server. The SAM application monitor test fails. Event logs at the 2012R2 show successful audit event by the local account at the time of the test.

Something different about 2012R2 targets?

Any help would be appreciated.

Sky2830

Find more posts tagged with

sam

2012 r2

Accepted answers

rboyer

If you're monitoring a machine in a workgroup from a domain joined machine and that work group machine still has UAC enabled, you need to do the registry hack to allow remote WMI calls to access the machine, regardless of authentication.

You should see a failure audit in the security eventlogs when you're trying your WMI call.

Here's the link on how to apply the registry "fix" without disabling UAC entirely.

https://support.microsoft.com/en-us/kb/951016

All comments

theglassman

Do the Event Viewer logs show any authentication errors?

sky2830

No. No authentication errors for the local account I'm trying to use.

There are multiple successful audit events when I hit the "Test" Button:

- Credential Validation

- Special Logon

- Logon

- Logoff

There is a recurring audit failure for an unrelated local account every now and then.

Sky2830

sky2830

Works OK with my personal domain based credentials.

With the local account I get this error:

Testing on node ..xxxx... failed with "Unknown" status.

Unable to connect to server " I.P. " as user " User ".

The local account is a local admin at the server.

Anybody?

Sky2830

theglassman

Are you entering the USERNAME as LOCALSERVERNAME\USER (and not just USER)?

sky2830

Entering as LOCALSERVERNAME\USER.

Event logs at the target server do show that the LOCALSERVERNAME\USER does authenticate when I test.

Sky2830

rboyer

You should see a failure audit in the security eventlogs when you're trying your WMI call.

Here's the link on how to apply the registry "fix" without disabling UAC entirely.

https://support.microsoft.com/en-us/kb/951016

rboyer

I would also start with a wbemtest if you're troubleshooting authentication/network for monitoring, it's always pretty helpful for me. This helps eliminate WMI, Firewall Rules not opened (if crossing network segments that go through one), and Security issues.