Cannot apply WDS image to client using non-admin account
I am at my wits end with this one and finally gave in....
I have recently uploaded a custom Windows 7 image and edited the boot images to include the necessary network drivers using DISM for this particular model. When I log in with a domain admin account and apply an image to a client
all is good. I can view, select and apply any image that I have enabled. When logging in with credentials of a non-admin I receive the following error message on screen:
WdsClient: There was a problem processing the selected image
Here is the log of the error message from the WDS:
Log Name: Microsoft-Windows-Deployment-Services-Diagnostics/Admin
Source: Microsoft-Windows-Deployment-Services-Diagnostics
Date: 3/*/2011 **:**:** PM
Event ID: 4114
Task Category: None
Level: Error
Keywords:
User: SYSTEM
Computer: ********.domain.local
Description:
The following WDS Client has encountered Fatal Error:
SessionGuid: {********-0c95-476f-9289-************}
MAC: *****************
IP: 192.168.*.*
ClientGuid: {********-0038-3710-8035-************}
Arch: 0
ErrorMessage: WdsClient: There was a problem processing the selected image.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-Deployment-Services-Diagnostics" Guid="{********-566b-47b6-9ba0-********}" />
<EventID>4114</EventID>
<Version>0</Version>
<Level>2</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x4000000000000000</Keywords>
<TimeCreated SystemTime="2011-03-*************.751Z" />
<EventRecordID>166</EventRecordID>
<Correlation />
<Execution ProcessID="2760" ThreadID="4628" />
<Channel>Microsoft-Windows-Deployment-Services-Diagnostics/Admin</Channel>
<Computer>********.domain.local</Computer>
<Security UserID="S-1-5-18" />
</System>
<UserData>
<WdsClientFatalErrorEvent xmlns:auto-ns2="http://schemas.microsoft.com/win/2004/08/events" xmlns="Microsoft-Windows-Deployment-Services-Diagnostics">
<SessionGUID>{************-0C95-476F-9289-************}</SessionGUID>
<ClientMAC>***************</ClientMAC>
<ClientIP>192.168.*.*</ClientIP>
<ClientGuid>{********-0038-3710-8035-************}</ClientGuid>
<ClientArch>0</ClientArch>
<ErrorMessage>WdsClient: There was a problem processing the selected image.</ErrorMessage>
</WdsClientFatalErrorEvent>
</UserData>
</Event>
I have granted the necessary permission from within the WDS mgmt console to the users who are experiencing issues. I have also attempted to add those users to the associated WDS directories under the RemoteInstall share on the server.
This was working until about 3 weeks ago when the last round of updates were applied to the 2008 server. Could one of those updates be the root cause of this issue or have I completely lost my mind?
Any help on this issue is much appreciated.
March 2nd, 2011 1:58pm
Hi,
The credentials provided in the user interface must be those of a domain account. After a client has been authenticated to the Windows Deployment Services
server, the authenticated user must be able to read the install .wim file and Res.rwm file from the RemoteInstall folder. By default, authenticated users have permissions to do so.
Please verify the permission of the account you use. What’s the result if you use a domain admin account?
Usually this should not be related to updates. However, if you really suspect update is the culprit, you can uninstall last round of updates one by one
to check the result.
Tim Quan
Free Windows Admin Tool Kit Click here and download it now
March 2nd, 2011 10:41pm
Hey Tim...
I have removed Authenticated Users from the RemoteInstall share as I do not wish to allow the entire domain to access the image files that have been uploaded to the WDS. I have checked all folder permissions on the RemoteInstall share and the domain
user in question has read permissions to every sub folder, the image.wim and the Res.RWM files.
I have also ensured that within the WDS mgmt console the domain user in question has also been granted read permissions to the Install Image folder as well as all the images that the account should have access to.
The domain user in question can login to the WDS install image list, view the install images that should be accessible, but when the image is selected and the "Next" button is clicked I receive the above error on any and all images that the account
should have access to.
I did do some homework on the updates that were recently installed. According to the descriptions on the KB sites they wouldn't appear to affect this particular issue.
Thanks again for your help
March 3rd, 2011 11:40am
Hi,
Thank you for the reply.
Please verify the account you use have the following permissions on the RemoteInstall folder and its subfolders and images.
Read & execute
List folder contents
Read
Tim Quan
Free Windows Admin Tool Kit Click here and download it now
March 3rd, 2011 9:43pm
Hey again...
I have checked to ensure that the account in question has the above rights to the RemoteInstall directory and all of its associated sub-folders and files that are required to perform the image install.
Thanks
March 4th, 2011 8:23am
Hi,
Maybe your WDS server is in another domain but you specify an account in a different domain. Please verify.
Tim Quan
Free Windows Admin Tool Kit Click here and download it now
March 7th, 2011 12:28am
sorry for the delayed reply...
The account which I am using to test this issue resides in the same domain as the WDS server. We also have accounts in another trusted domain which used to be able to access the install images, but those are experiencing the same issue as well.
Thanks Tim
March 7th, 2011 8:16am
Hey Tim,
Its been a while since you last replied. Is there any other steps I should try to resolve this issue or am I stuck?
Free Windows Admin Tool Kit Click here and download it now
March 10th, 2011 8:05am
Hey Tim,
Its been a while since you last replied. Is there any other steps I should try to resolve this issue or am I stuck?
Sneekypete, here's a detailed troubleshooting guide to help prepare your configuration to allow a domain user the install privileges.
"Server 2008 & Server 2008 R2 > Browse by Technologies > Windows Deployment Services Deployment Guide > Troubleshooting > Required Permissions"
http://technet.microsoft.com/en-us/library/cc754005(WS.10).aspx
This is probably one of the best detailed guides that should have been in the "FRONT" of setting up the WDS Server instead of at the back in the troubleshooting steps with their, "Oh by the way..." impractical approach... doh!
Anyway...
Best Regards, I hope things go well with your deployment.
Steve Kline
Microsoft Certified IT Professional: Server Administrator
Microsoft Certified Product Specialist
Microsoft Certified Network Product Specialist
Red Hat Certified System Administrator
This posting is "as is" without warranties and confers no rights.
March 10th, 2011 9:23am
Steve,
Thanks for helping out with this issue.
I have ran across this TechNet article during my unending search to resolve this issue, but I continue to get the errors I have described earlier in this post. I have ensured that the domain account in question has the appropriate rights to the
install.wim and res.rwm files as well as any other parent folder within the RemoteInstall directory. I have also checked permissions on the WDS console to ensure this account has read permissions to the image folders and images.
Just to clarify the domain account in question can PXE boot the client, enter their credentials and view the install image list. Yet when the image is selected and the "Next" button is selected to apply the image the above error message is shown.
Is there another spot that I am missing where permissions must be granted?
Free Windows Admin Tool Kit Click here and download it now
March 10th, 2011 9:48am
Since you removed the custom permissions, why you do not try to check the "share permissions" and give everyone read access to the share.
***** This posting is provided "AS IS" with no warranties, and confers no rights.
March 15th, 2011 1:36pm
Thanks Tony... sometimes it is the small things we overlook.... jeez.
Free Windows Admin Tool Kit Click here and download it now
March 15th, 2011 1:38pm