Cannot apply WDS image to client using non-admin account
I am at my wits end with this one and finally gave in.... I have recently uploaded a custom Windows 7 image and edited the boot images to include the necessary network drivers using DISM for this particular model. When I log in with a domain admin account and apply an image to a client all is good. I can view, select and apply any image that I have enabled. When logging in with credentials of a non-admin I receive the following error message on screen: WdsClient: There was a problem processing the selected image Here is the log of the error message from the WDS: Log Name: Microsoft-Windows-Deployment-Services-Diagnostics/Admin Source: Microsoft-Windows-Deployment-Services-Diagnostics Date: 3/*/2011 **:**:** PM Event ID: 4114 Task Category: None Level: Error Keywords: User: SYSTEM Computer: ********.domain.local Description: The following WDS Client has encountered Fatal Error: SessionGuid: {********-0c95-476f-9289-************} MAC: ***************** IP: 192.168.*.* ClientGuid: {********-0038-3710-8035-************} Arch: 0 ErrorMessage: WdsClient: There was a problem processing the selected image. Event Xml: <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event"> <System> <Provider Name="Microsoft-Windows-Deployment-Services-Diagnostics" Guid="{********-566b-47b6-9ba0-********}" /> <EventID>4114</EventID> <Version>0</Version> <Level>2</Level> <Task>0</Task> <Opcode>0</Opcode> <Keywords>0x4000000000000000</Keywords> <TimeCreated SystemTime="2011-03-*************.751Z" /> <EventRecordID>166</EventRecordID> <Correlation /> <Execution ProcessID="2760" ThreadID="4628" /> <Channel>Microsoft-Windows-Deployment-Services-Diagnostics/Admin</Channel> <Computer>********.domain.local</Computer> <Security UserID="S-1-5-18" /> </System> <UserData> <WdsClientFatalErrorEvent xmlns:auto-ns2="http://schemas.microsoft.com/win/2004/08/events" xmlns="Microsoft-Windows-Deployment-Services-Diagnostics"> <SessionGUID>{************-0C95-476F-9289-************}</SessionGUID> <ClientMAC>***************</ClientMAC> <ClientIP>192.168.*.*</ClientIP> <ClientGuid>{********-0038-3710-8035-************}</ClientGuid> <ClientArch>0</ClientArch> <ErrorMessage>WdsClient: There was a problem processing the selected image.</ErrorMessage> </WdsClientFatalErrorEvent> </UserData> </Event> I have granted the necessary permission from within the WDS mgmt console to the users who are experiencing issues. I have also attempted to add those users to the associated WDS directories under the RemoteInstall share on the server. This was working until about 3 weeks ago when the last round of updates were applied to the 2008 server. Could one of those updates be the root cause of this issue or have I completely lost my mind? Any help on this issue is much appreciated.
March 2nd, 2011 1:58pm

Hi, The credentials provided in the user interface must be those of a domain account. After a client has been authenticated to the Windows Deployment Services server, the authenticated user must be able to read the install .wim file and Res.rwm file from the RemoteInstall folder. By default, authenticated users have permissions to do so. Please verify the permission of the account you use. What’s the result if you use a domain admin account? Usually this should not be related to updates. However, if you really suspect update is the culprit, you can uninstall last round of updates one by one to check the result. Tim Quan
Free Windows Admin Tool Kit Click here and download it now
March 2nd, 2011 10:41pm

Hey Tim... I have removed Authenticated Users from the RemoteInstall share as I do not wish to allow the entire domain to access the image files that have been uploaded to the WDS. I have checked all folder permissions on the RemoteInstall share and the domain user in question has read permissions to every sub folder, the image.wim and the Res.RWM files. I have also ensured that within the WDS mgmt console the domain user in question has also been granted read permissions to the Install Image folder as well as all the images that the account should have access to. The domain user in question can login to the WDS install image list, view the install images that should be accessible, but when the image is selected and the "Next" button is clicked I receive the above error on any and all images that the account should have access to. I did do some homework on the updates that were recently installed. According to the descriptions on the KB sites they wouldn't appear to affect this particular issue. Thanks again for your help
March 3rd, 2011 11:40am

Hi, Thank you for the reply. Please verify the account you use have the following permissions on the RemoteInstall folder and its subfolders and images. Read & execute List folder contents Read Tim Quan
Free Windows Admin Tool Kit Click here and download it now
March 3rd, 2011 9:43pm

Hey again... I have checked to ensure that the account in question has the above rights to the RemoteInstall directory and all of its associated sub-folders and files that are required to perform the image install. Thanks
March 4th, 2011 8:23am

Hi, Maybe your WDS server is in another domain but you specify an account in a different domain. Please verify. Tim Quan
Free Windows Admin Tool Kit Click here and download it now
March 7th, 2011 12:28am

sorry for the delayed reply... The account which I am using to test this issue resides in the same domain as the WDS server. We also have accounts in another trusted domain which used to be able to access the install images, but those are experiencing the same issue as well. Thanks Tim
March 7th, 2011 8:16am

Hey Tim, Its been a while since you last replied. Is there any other steps I should try to resolve this issue or am I stuck?
Free Windows Admin Tool Kit Click here and download it now
March 10th, 2011 8:05am

Hey Tim, Its been a while since you last replied. Is there any other steps I should try to resolve this issue or am I stuck? Sneekypete, here's a detailed troubleshooting guide to help prepare your configuration to allow a domain user the install privileges. "Server 2008 & Server 2008 R2 > Browse by Technologies > Windows Deployment Services Deployment Guide > Troubleshooting > Required Permissions" http://technet.microsoft.com/en-us/library/cc754005(WS.10).aspx This is probably one of the best detailed guides that should have been in the "FRONT" of setting up the WDS Server instead of at the back in the troubleshooting steps with their, "Oh by the way..." impractical approach... doh! Anyway... Best Regards, I hope things go well with your deployment. Steve Kline Microsoft Certified IT Professional: Server Administrator Microsoft Certified Product Specialist Microsoft Certified Network Product Specialist Red Hat Certified System Administrator This posting is "as is" without warranties and confers no rights.
March 10th, 2011 9:23am

Steve, Thanks for helping out with this issue. I have ran across this TechNet article during my unending search to resolve this issue, but I continue to get the errors I have described earlier in this post. I have ensured that the domain account in question has the appropriate rights to the install.wim and res.rwm files as well as any other parent folder within the RemoteInstall directory. I have also checked permissions on the WDS console to ensure this account has read permissions to the image folders and images. Just to clarify the domain account in question can PXE boot the client, enter their credentials and view the install image list. Yet when the image is selected and the "Next" button is selected to apply the image the above error message is shown. Is there another spot that I am missing where permissions must be granted?
Free Windows Admin Tool Kit Click here and download it now
March 10th, 2011 9:48am

Since you removed the custom permissions, why you do not try to check the "share permissions" and give everyone read access to the share. ***** This posting is provided "AS IS" with no warranties, and confers no rights.
March 15th, 2011 1:36pm

Thanks Tony... sometimes it is the small things we overlook.... jeez.
Free Windows Admin Tool Kit Click here and download it now
March 15th, 2011 1:38pm

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics