SCOM: Agent installation failed because Access is denied (80070005)

Sometimes, when you try to remotely install a SCOM agent you get an access denied message.

The Operations Manager Server failed to perform specified operation on computer Operation: Agent Install Install account Error Code: 80070005 Error Description: Access is denied

Usual cause

Most of the time you can address this issue by either granting administrator’s rights to the Management Server Action Account or to provide alternate credential with administrator’s rights.

User account with Administrator right Management Server Action Account Discovery

A tricky case

It also happens that having the Action Account in an AD group, itself member of the local Administrators group is not enough, and you have to make the Action Account directly a member of the local Administrators group on the target computer.

Another cause

Once, the error message was the same, but the cause was completely different. I had to enable administrative shares (which had been disabled on this server) and restart the Server service.

Set-ItemProperty HKLM:\SYSTEM\CurrentControlSet\services\LanmanServer\Parameters -Name AutoShareServer -Value 1
Restart-Service -Name LanmanServer

Enable administrative shares

Or since Windows Server 2012 you can also use the Set-SmbServerConfiguration cmdlet.

Set-SmbServerConfiguration -AutoShareServer:$true
Restart-Service -Name LanmanServer

Leave a Reply

Please log in using one of these methods to post your comment:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s