Home | Recovery | Cisco How To Net How To | Blog | Search | Forums | Services | Setup Guide | Chicagotech MVP | IT Exam Practice  |  About Us | Contact Us|

 

 

Can't logon clients using Remote Tools


We are running SCCM 2007 Sp2. We can access XP SP3 clients using Remote Desktop Client in SCCM console. However, if we try Remote Tools, the logon screen popup, but can't logon with "access denied"

1. We have tried different domain admin account.

2. We have disabled the firewall.

3. HKLM\SOFTWARE\Microsoft\SMS\Client\Client Components\Remote Control has the domain admins account and other member accounts of domain administrators.

4. "Use Remote Tools" permission has been assigned under a collection.

5. 'Permitted Viewers' permission has been assigned under the Properties of Remote Tools Client Agent.

What could be the problem?

Case 1: From the locationservice log, we can find the followings.

DhcpGetOriginalSubnetMask entry point not supported. LocationServices 9/13/2011 4:21:19 PM 3544 (0x0DD8)

Current AD site of machine is Default-First-Site-Name LocationServices 9/13/2011 4:21:19 PM 3544 (0x0DD8)

Attempting to retrieve SLPs from AD LocationServices 9/13/2011 4:21:19 PM 3544 (0x0DD8)

Retrieved SLPs from AD LocationServices 9/13/2011 4:21:20 PM 3544 (0x0DD8)

Current AD site of machine is Default-First-Site-Name LocationServices 9/13/2011 4:21:20 PM 3544 (0x0DD8)

LSGetAssignedSiteFromSLP : No site code returned from SLP LocationServices 9/13/2011 4:21:21 PM 3544 (0x0DD8)

This log shows that Current AD site of machine is Default-First-Site-Name. However the AD site name configured in the site boundary is 001.

I believe this is a possible root cause to your problem. Please change the site name from 001 to DEFAULT-FIRST-SITE-NAME and manually assign the client to your SCCM site by using Configuration Manager Properties in Control Panel.

Case 2: try to repair the Remote Tools Agent. Please check this how to for more details:

SCCM: Repair ConfigMgr Remote Tools Agent

Case 3: Check ConfigMgr Remote Control Users group
---------------------
a. Go to Control Panel | Administrative Tools | Computer Management
b. Expand Computer Management | System Tools | Local Users and Groups | Group in the left panel
c. Check if ConfigMgr Remote Control Users group exist.

If so, please double click this group and confirm if the account used to perform remote tool is included in the member list.

Case 4:  I found the followings in the ClientIDManagerStartup log file. RegTask: Failed to refresh site code. Error: 0x8000ffff ClientIDManagerStartup 9/11/2011 4:41:39 AM 2052 (0x0804). It seems this computer has problem in site assignment. Try to assign site code to the client by going to Configuration Manager, selecting Advanced. Then assign the site code to the client.

Case 5: Try to reinstall SCCM Client by following these steps; Reinstall the SCCM client.

case 6: make sure you have extended AD schema for configuration manager? If not, please follow the instructions in the following two articles to extend AD and publish configMgr settings to AD

How to Extend the Active Directory Schema Using ExtADSch.exe

http://technet.microsoft.com/en-us/library/bb680608.aspx

How to Publish Configuration Manager Site Information to Active Directory Domain Services

http://technet.microsoft.com/en-us/library/bb680711.aspx

Case 7: make sure the problematic computer is in a domain?

Case 8: It could be the configure site boundary issue


Post your questions, comments, feedbacks and suggestions

Contact a consultant

Related Topics

 

 

 

Bob Lin Photography services

Real Estate Photography services 

 

  This web is provided "AS IS" with no warranties.
Copyright © 2002-2018 ChicagoTech.net, All rights reserved. Unauthorized reproduction forbidden.