domain\account logon error in run a command line sequence

Hi,

we have some strange authentication problems, deploying computers with SCCM 2012,

we have sometimes the following error:

The task sequence execution engine failed executing the action (Add to Dept collection) in the group (****) with the error code 2147943726  Action output: [ smsswd.exe ] PackageID = 'CDT00032' BaseVar = ''; ContinueOnError='' ProgramName = 'cscript.exe AddComputerToCollection.vbs /CollectionID:****** /ComputerName:******' SwdAction = '0001' ::LogonUser(sUserAccountName; sUserDomainName; sUserPassword; LOGON32_LOGON_INTERACTIVE; LOGON32_PROVIDER_DEFAULT; &hUserToken); HRESULT=8007052e (e:\nts_sccm_release\sms\client\osdeployment\installsoftware\runcommandline.cpp;324) cmd.Execute(pszPkgID; sProgramName; dwCmdLineExitCode); HRESULT=8007052e (e:\nts_sccm_release\sms\client\osdeployment\installsoftware\main.cpp;372) LogonUser failed with the error 0x8007052e Install Software failed to run command line; hr=0x8007052e. The operating system reported error 2147943726: Logon failure: unknown user name or bad passwd.

The user is correctly Set. , password works (because sometimes sequence is ok)

No errors before executing.

Computer is correctly registered in AD.

November 14th, 2012 12:24pm

At which phase in the Task Sequence are you running this program - WinPE or OS?  I believe trying to use 'Run As' during Windows PE is not supported and you have to be running this step later in the task sequence when the OS is up and running.
Free Windows Admin Tool Kit Click here and download it now
November 14th, 2012 3:15pm

The sequence is running in postinstall mode after image deployment and setup is done, not in winpe phase , i know that connexion to domain is not possible in Winpe phase.

November 14th, 2012 3:33pm

Sounds more like a ad account problem if its working sometimes.. you can lookup the domain from the client when it fails? No logon hours are defined for the account and such?
Free Windows Admin Tool Kit Click here and download it now
November 14th, 2012 5:24pm

no,

the domain account is not under policies.

but the vbs is connecting sur SCCM server to add the computer account in specific collection.

The domain accoutn is SMSADMIN also.

i modify my script and TS.:

  • script is now logging actions.
  • in TS i Add a network drive connexion to SCCM server with same account.
  • in TS a change COM3 registry key to 0x100000 as i saw in other pages.
November 14th, 2012 6:15pm

was this issue resolved for you? if so could you please share the solution

thanks

Free Windows Admin Tool Kit Click here and download it now
January 14th, 2014 12:34am

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics