Protect Computers try to install with Account <Computername>$

Hello David Do Van,

Protect Computers asks for an account which is used to access the remote computer, create a scheduled task running under this account, and access the specified share/CID. Guess it is normal behaviour of the Windows APIs the Task Scheduler uses. If Protect works on some computers but not on others it's not a general problem with the share though as shown in the article for 80070002.
Is this an AD environment and did you use a Domain Admin? Can you run setup.exe "manually" from an elevated command window one of the problem machines? 

Christian   

Hello QC,

Yes it is an AD environment and I had to use ->The<- Domain Administrator because my boss wanted it. And Yes I can install the Endpoint by hand, but that would disturbed the users workflow. I guess, since it is not a critical behaviour it would be easiest to give domain computers read rights to the share.

Cheers, David Do Van

Hello David Do Van,

it might be an obscure security setting that at some point breaks the workflow. by hand would be setup.exe with the switches from an elevated command prompt running in a logon session of the admin account. But IIRC I had cases where the scheduled task ran but not as expected (i.e. the network login nevertheless failed).

If it works with read rights for the computer accounts (which aren't really a security risk) then fine (and it'd make the Task Scheduler a suspect). You are aware that Protect is just one way to install, aren't you?

Christian

Yes I know I cann roll out per Script or by hand. But by hand it disturbes the user and Startup Script would slow down logins for a while. So protect is my actual way to go.

Yes I know I cann roll out per Script or by hand. But by hand it disturbes the user and Startup Script would slow down logins for a while. So protect is my actual way to go.