Lync 2010 Install Error: System.UnauthorizedAccessException

Hey everyone,

 

I'm receiving the following error when trying to create the Central management Store:

Action   Action Information   Time Logged   Execution Result
   Install-CSDatabase           Failed
     Get Forest State       12/6/2010 11:19:06 AM   Success
          Find root domain gotovelocity.com.   12/6/2010 11:19:06 AM    
          Schema type: server   12/6/2010 11:19:06 AM    
          Action: Check Groups   12/6/2010 11:19:06 AM    
          Action: Check Group permissions   12/6/2010 11:19:06 AM    
          Action: Process permissions on "CN=RTCUniversalGlobalReadOnlyGroup,CN=Users,DC=gotovelocity,DC=com".   12/6/2010 11:19:06 AM    
          Action: Process permissions on "CN=RTCUniversalGlobalWriteGroup,CN=Users,DC=gotovelocity,DC=com".   12/6/2010 11:19:06 AM    
          Action: Process permissions on "CN=RTCUniversalServerReadOnlyGroup,CN=Users,DC=gotovelocity,DC=com".   12/6/2010 11:19:06 AM    
          Action: Process permissions on "CN=RTCUniversalUserReadOnlyGroup,CN=Users,DC=gotovelocity,DC=com".   12/6/2010 11:19:06 AM    
          Action: Process permissions on "CN=RTCHSUniversalServices,CN=Users,DC=gotovelocity,DC=com".   12/6/2010 11:19:06 AM    
          Action: Process permissions on "CN=RTCComponentUniversalServices,CN=Users,DC=gotovelocity,DC=com".   12/6/2010 11:19:06 AM    
          Action: Process permissions on "CN=RTCProxyUniversalServices,CN=Users,DC=gotovelocity,DC=com".   12/6/2010 11:19:06 AM    
          Action: Process permissions on "CN=RTCUniversalServerAdmins,CN=Users,DC=gotovelocity,DC=com".   12/6/2010 11:19:06 AM    
          Action: Process permissions on "CN=RTCUniversalUserAdmins,CN=Users,DC=gotovelocity,DC=com".   12/6/2010 11:19:06 AM    
          Action: Process permissions on "CN=RTCUniversalReadOnlyAdmins,CN=Users,DC=gotovelocity,DC=com".   12/6/2010 11:19:06 AM    
          Action: Process permissions on "CN=RTCUniversalConfigReplicator,CN=Users,DC=gotovelocity,DC=com".   12/6/2010 11:19:06 AM    
          Action: Process permissions on "CN=RTCUniversalSBATechnicians,CN=Users,DC=gotovelocity,DC=com".   12/6/2010 11:19:06 AM    
          Action: Process permissions on "CN=RTCSBAUniversalServices,CN=Users,DC=gotovelocity,DC=com".   12/6/2010 11:19:07 AM    
          Action: Process permissions on "CN=CSAdministrator,CN=Users,DC=gotovelocity,DC=com".   12/6/2010 11:19:07 AM    
          Action: Process permissions on "CN=CSVoiceAdministrator,CN=Users,DC=gotovelocity,DC=com".   12/6/2010 11:19:07 AM    
          Action: Process permissions on "CN=CSUserAdministrator,CN=Users,DC=gotovelocity,DC=com".   12/6/2010 11:19:07 AM    
          Action: Process permissions on "CN=CSResponseGroupAdministrator,CN=Users,DC=gotovelocity,DC=com".   12/6/2010 11:19:07 AM    
          Action: Process permissions on "CN=CSLocationAdministrator,CN=Users,DC=gotovelocity,DC=com".   12/6/2010 11:19:07 AM    
          Action: Process permissions on "CN=CSArchivingAdministrator,CN=Users,DC=gotovelocity,DC=com".   12/6/2010 11:19:07 AM    
          Action: Process permissions on "CN=CSServerAdministrator,CN=Users,DC=gotovelocity,DC=com".   12/6/2010 11:19:07 AM    
          Action: Process permissions on "CN=CSViewOnlyAdministrator,CN=Users,DC=gotovelocity,DC=com".   12/6/2010 11:19:07 AM    
          Action: Process permissions on "CN=CSHelpDesk,CN=Users,DC=gotovelocity,DC=com".   12/6/2010 11:19:07 AM    
          Action: Check Permission settings of CN=RTC Service,CN=Services,CN=Configuration,DC=gotovelocity,DC=com   12/6/2010 11:19:07 AM    
          Action: Check Permission settings of ConfigurationContainer   12/6/2010 11:19:07 AM    
          Action: Check Permission settings of RootDomainSystemContainer   12/6/2010 11:19:07 AM    
          Access permission only applies to the Active Directory System container.   12/6/2010 11:19:07 AM    
          Forest state: LC_FORESTSETTINGS_STATE_READY   12/6/2010 11:19:07 AM    
      Found "RTCUniversalServerAdmins": True   12/6/2010 11:19:07 AM    
      Found "RTCUniversalConfigReplicator": True   12/6/2010 11:19:07 AM    
      Found "RTCUniversalReadOnlyAdmins": True   12/6/2010 11:19:07 AM    
      Error: An error occurred: "System.UnauthorizedAccessException" "Access is denied. (Exception from HRESULT: 0x80070005 (E_ACCESSDENIED))"   12/6/2010 11:19:08 AM   Error
December 6th, 2010 7:18pm

Hi,

Have you got these permissions for your user from which you are installing Lync ?

01. Domain Admins

02. Enterprise Admins

03. System Admins

04. Administrators on Domain

05. Administrators on local Lync Server

 

Regards.

Shafaquat Ali.

Free Windows Admin Tool Kit Click here and download it now
December 6th, 2010 11:14pm
Yes, the user has all of the correct permissions.
December 6th, 2010 11:19pm

Hi,

Than I would like to ask that have you make the share folder and gave full permissions to your user ?

Also check this step by step guide for Lync Deployment I hope this will help you.

Lync Server 2010 Installation step by step

 

Regards.

Shafaquat Ali.

Free Windows Admin Tool Kit Click here and download it now
December 6th, 2010 11:25pm
I wiped the server and reloaded following step by step to the letter as shown in the above link and I still get stuck at the same spot with the same error.
December 7th, 2010 2:09am

I was able to get passed that point but now I can't seem to get the Lync Control Panel to launch.

 

When I launch the panel a username and password box appear, I enter the credentials for the uaser account and I get an HTTP Error 401.1 Unauthorized.

Free Windows Admin Tool Kit Click here and download it now
December 7th, 2010 3:55am

J Dig,

Have you added your self to the CSAdministrators group and logged in and out of the server? 

 

Hope this helps!

-kp

December 7th, 2010 5:54am
i'm running into the same problem too. can you explain how you fixed it?
Free Windows Admin Tool Kit Click here and download it now
December 7th, 2010 9:30am

J Dig,

Have you added your self to the CSAdministrators group and logged in and out of the server? 

 

Hope this helps!

December 7th, 2010 4:43pm
i'm running into the same problem too. can you explain how you fixed it?
The solution to my original problem was to create a new share folder and verify it was accessible across the network. Then I created a new topology and it published fine. Not sure what I had done wrong before, I know the only difference was I placed the new share folder in the C:/ directory as opposed to the /Microsoft/Lync Server directory.
Free Windows Admin Tool Kit Click here and download it now
December 7th, 2010 4:58pm
What Edition did you attempt to install? If you're attempting to install Standard edition, you'll need to use the Local FQDN of the machine for your CMS.
December 9th, 2010 11:27am

Hi, J Dig, do above approaches help you? any updates let us know.

Free Windows Admin Tool Kit Click here and download it now
December 15th, 2010 1:51pm

Make sure that the name of the FQDN you specify for the pool (during the topology wizard) matches that of the server name FQDN - I had the problems described above until I did that.  My lab server name was lync2010 but in the pool fqdn I just set that to lync.labdomainname.local

When I tried to access file shares using the lync.labdomainname.local name it did not work and kept prompting for credentials which I knew were correct, changed to pool FQDN to lync2010.labdomainname.local and hey presto it worked!

Hope this helps someone else

January 27th, 2011 8:24pm
I can confirm that making the pool name match the server name will resolve this issue.  To change the pool name, expand the Central Site, then Standard Edition Front End Servers and right click your pool and select Edit Properties.
Free Windows Admin Tool Kit Click here and download it now
February 4th, 2011 7:16pm

hello,

i have done all the above and i still have this error:Error: An error occurred: "System.UnauthorizedAccessException" "Access is denied. (Exception from HRESULT: 0x80070005 (E_ACCESSDENIED))"

any ideas?

 
February 17th, 2011 12:27pm
I too am encountering the same error "System.UnauthorizedAccessException" when trying to publish topology for the first time. I have verified the file share as accessable from other computers and have rechecked the installing user's authority. Any other ideas???
Free Windows Admin Tool Kit Click here and download it now
March 23rd, 2011 9:54pm

Try disabling the Loopback Check, for example via Powershell:

New-ItemProperty HKLM:\System\CurrentControlSet\Control\Lsa -Name "DisableLoopbackCheck" -Value "1" -PropertyType dword

Loopback Check disables using FQDN on local server.

 

April 4th, 2011 2:58pm

Try disabling the Loopback Check, for example via Powershell:New-ItemProperty HKLM:\System\CurrentControlSet\Control\Lsa -Name "DisableLoopbackCheck" -Value "1" -PropertyType dword

This worked for me

Free Windows Admin Tool Kit Click here and download it now
May 27th, 2011 8:54pm
Yes, I also had the similar issue which got fixed by adding the mentioned Regkey... Thank you all.
June 29th, 2011 2:57am

I also get similar error while trying to install the standard edition server on win 2k 8 r2

And it get solved by adding the Regkey

Free Windows Admin Tool Kit Click here and download it now
October 2nd, 2011 10:06am
When you create the pool on lync standard edition, you have to use the server name FQDN as pool name.
April 25th, 2012 9:03am

Hello askwizard,

I also get simillar error like u.
for troubleshooting, make sure the server name FQDN same with FQDN on SQL Store,,

I Hope usefull

Free Windows Admin Tool Kit Click here and download it now
January 10th, 2013 10:17pm

have you added the dns entry to route to the Control panel. Also have you added the path to the topology.?

regards 

Iain Smith

www.northernlync.co.uk

Please remember to click Mark as Answer on the post that helps you, and to click Unmark as Answer if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.

January 12th, 2013 7:09pm

are you running Standard edition or enterprise edition.? csadmins>? windows firewall open?

regards 

Iain Smith

www.northernlync.co.uk

Please remember to click Mark as Answer on the post that helps you, and to click Unmark as Answer if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.

Free Windows Admin Tool Kit Click here and download it now
January 12th, 2013 7:09pm

Hi,

Have you tried the solutions written in this thread ? http://social.technet.microsoft.com/Forums/en-US/ocsplanningdeployment/thread/241610f2-5951-4c75-99ef-ac94368c1830

You problem can be related to a manual installation of SQL Express or a problem with File Share Rights... I suggest you take a close look at this...

It should probably fix your issue.

Hope it helps !

Re

January 18th, 2013 8:47pm

Hey guys,

what worked for me in this instance was to use CNAMEs pointing to the original host name. That way I could keep all my FQDNs standard should we decide to scale out into pools and such.

Example: 

  • pool Alias(CNAME) machinename.contoso.com.
  • meet Alias(CNAME) machinename.contoso.com.
  • admin Alias(CNAME) machinename.contoso.com.

Best of luck!

Free Windows Admin Tool Kit Click here and download it now
August 23rd, 2013 9:56am

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics