SCE2010. Access Denied error
I've just deployed a new SCE2010 server (host is Windows 2008 R2). The server is using a remote DB running on SQL Server 2008 R2. The install went fine, and I can add servers to the console ok, but every time I run a 'task' in SCE, either on the local server or via a remote console, while the task does complete, I get the following error just before the task finishes; Unhandled exception has occurred in your application. If you click Continue, the application will ignore this error and attempt to continue. If you click Quit, the application will close immediately. Access is denied. (Exception from HRESULT: 0x80070005 (E_ACCESSDENIED)). I generally click continue, and things carry on, but I really want to know why this is happening, and what to do to resolve it. There's nothing permission wise that appears to be incorrect, but I guess it might be something buried deep somewhere. There's also a large JIT bebug reoprt, but this is the first part; ************** Exception Text ************** System.UnauthorizedAccessException: Access is denied. (Exception from HRESULT: 0x80070005 (E_ACCESSDENIED)) at System.Windows.Forms.UnsafeNativeMethods.IHTMLLocation.GetHref() at System.Windows.Forms.WebBrowser.get_Document() at System.Windows.Forms.WebBrowser.get_DocumentStream() at System.Windows.Forms.WebBrowser.get_DocumentText() at Microsoft.EnterpriseManagement.Mom.Internal.UI.RunTask.TaskStatusBase.EnableButtons() at System.Windows.Forms.ListView.WmReflectNotify(Message& m) at System.Windows.Forms.ListView.WndProc(Message& m) at System.Windows.Forms.Control.ControlNativeWindow.WndProc(Message& m) at System.Windows.Forms.NativeWindow.Callback(IntPtr hWnd, Int32 msg, IntPtr wparam, IntPtr lparam) We're using a resource account as the default Action account, but this is in the local admin group on each managed server, and is also domain admin equivilant.
October 20th, 2011 5:07am

did you try other user to run the task? I understand that may be an obvious question, but the error is clear and I wanted to make sure we are covering the basics. Thanks, Jose
Free Windows Admin Tool Kit Click here and download it now
October 20th, 2011 9:53pm

did you try other user to run the task? I understand that may be an obvious question, but the error is clear and I wanted to make sure we are covering the basics. Thanks, Jose
October 20th, 2011 9:53pm

Hi, May I know if the issue occurs when running any task? Does this issue occur on all the managed computers? Based on my research, I would like to suggest the following: 1. Please double-check your administration account or change another account to have a try: Administration Accounts in System Center Essentials 2010 http://technet.microsoft.com/en-us/library/bb422929.aspx 2. Please ensure DCOM has been enabled and check the DCOM settings on the target computer: Enable or Disable DCOM http://technet.microsoft.com/en-us/library/cc771387.aspx Securing a Remote WMI Connection http://msdn.microsoft.com/en-us/library/windows/desktop/aa393266(v=VS.85).aspx Regarding the issue, please also refer to the method in the following thread: Error (E_ACCESSDENIED) when Collecting inventory or Detecting Software http://social.technet.microsoft.com/Forums/en-SG/systemcenterinventory/thread/97fd1c43-c885-4aac-ad8a-2968644eca9f Hope this helps. Thanks. Nicholas Li TechNet Subscriber Support in forum If you have any feedback on our support, please contact tnmff@microsoft.com. Nicholas Li - MSFT Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.
Free Windows Admin Tool Kit Click here and download it now
October 21st, 2011 1:52am

I've had a look, and it might be that the 'Default Action Account' Run As Profile is set to 'Local System Action Account' except for the SCE2010 host itself, which is using a domain resource account. I assume the Default Action Account is used for any non-specific tasks that are run, so it would make sense for this to be a domain account. Is this correct?
October 21st, 2011 11:17am

I've had a look, and it might be that the 'Default Action Account' Run As Profile is set to 'Local System Action Account' except for the SCE2010 host itself, which is using a domain resource account. I assume the Default Action Account is used for any non-specific tasks that are run, so it would make sense for this to be a domain account. Is this correct?
Free Windows Admin Tool Kit Click here and download it now
October 21st, 2011 11:17am

the default is localsystem. that is the only supported way to run the healthservice service in sce/scom. you may get an event if you set other account to run the service.
October 22nd, 2011 11:46am

I just want to say hi and to see how thing are going there. When you get a chance, please send a quick note to let us know the current status of this issue. If the problem has been resolved or if you need further troubleshooting, please let us know. Thanks, and have a great day! Nicholas Li TechNet Subscriber Support in forum If you have any feedback on our support, please contact tnmff@microsoft.com.Nicholas Li - MSFT Please remember to click Mark as Answer on the post that helps you, and to click Unmark as Answer if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.
Free Windows Admin Tool Kit Click here and download it now
October 24th, 2011 5:00am

I just want to say hi and to see how thing are going there. When you get a chance, please send a quick note to let us know the current status of this issue. If the problem has been resolved or if you need further troubleshooting, please let us know. Thanks, and have a great day! Nicholas Li TechNet Subscriber Support in forum If you have any feedback on our support, please contact tnmff@microsoft.com.Nicholas Li - MSFT Please remember to click Mark as Answer on the post that helps you, and to click Unmark as Answer if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.
October 24th, 2011 5:00am

As strange as it sounds, uninstalling IE9 resolved my issue whereby I could not run remote tasks via the SCE console. Hope this helps, Mark
Free Windows Admin Tool Kit Click here and download it now
May 29th, 2012 6:31am

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics