Page 1 of 1

Windows7 Audit results in Error: 5

PostPosted: Thu Nov 18, 2010 10:56 pm
by kierangarbutt
Hi all,

we've been using Alloy Discovery 5.1.0 for a while with no problems, but are starting to deploy Windows 7 machines which of course use different methods for creating exceptions in the firewalls etc.

We're still receiving Error: 5 though which in my mind means Discovery can reach the machine but is failing on credentials. I have double-checked the account on the machine, which is an admin, so not sure why it's failing. The same credentials on a WindowsXP machine work no problem.

Any advice?
Cheers!

Re: Windows7 Audit results in Error: 5

PostPosted: Wed Dec 01, 2010 1:49 pm
by tccwrd
Do you have UAC on? Firewall?

Try disabling both and see if it works. I'm not saying you should leave them disabled, but this will at least narrow it down.

Re: Windows7 Audit results in Error: 5

PostPosted: Thu Dec 09, 2010 4:40 pm
by kierangarbutt
Hi there,

sorry for the delay. If I turn UAC off (or at least slide down to "Do Not Notify"), then the audit works...so I guess the question now is, what setting is going to be the best that will protect the computer whilst allowing the audit to run...

Anyone?

Re: Windows7 Audit results in Error: 5

PostPosted: Thu Dec 16, 2010 6:18 pm
by tccwrd
Dunno. Take a look at this though - http://support.alloy-software.com/?mode ... d=KB001402

Re: Windows7 Audit results in Error: 5

PostPosted: Thu Dec 16, 2010 6:31 pm
by kierangarbutt
Hi Gary,

I think our support contract has expired...I can't access that link :-/

Re: Windows7 Audit results in Error: 5

PostPosted: Mon Jan 03, 2011 2:21 pm
by eliaslynch
kierangarbutt wrote:Hi Gary,

I think our support contract has expired...I can't access that link :-/


Here's what it says:

KB001402: Error: 5. Access is denied

OVERVIEW
While running the On-demand audit you may receive the following error message:

Error: 5. Access is denied

CAUSE
The error indicates that you do not have the proper credentials to logon to the remote machine.

The following reasons may cause to the error message:

1.The On-demand audit account is not sufficient for connecting to the remote computer.
2.The computer being audited is turned OFF or disconnected from the network.
3.Firewall and/or third party product may eliminate connection to the remote computer.

SOLUTION
Verify the possible causes above and re-start the On-demand audit.


REFERENCE
System Error Codes (1000-1299)

http://msdn.microsoft.com/en-us/library/ms681383(VS.85).aspx

Re: Windows7 Audit results in Error: 5

PostPosted: Mon Jan 03, 2011 2:57 pm
by kierangarbutt
Hi Elias.

Thanks for that. I've narrowed the cause of the problem to the UAC in Windows7. If I disable UAC then the audit runs as expected. But as soon as I turn UAC back on (even the first level on the slider), the audit fails. I don't particularly want to roll my machines out with UAC disabled. There *must* be some way of adding an exception?

Thanks for your help guys.

Kieran

Re: Windows7 Audit results in Error: 5

PostPosted: Thu Jan 06, 2011 5:18 pm
by janstonselig
I'm not sure either, but this one talks about what needs to be open to run the on demand feature. Maybe you can make exceptions in firewall?

KB001317: Ports and Protocols required by the On-Demand Audit Feature
http://support.alloy-software.com/?mode ... d=KB001317

Re: Windows7 Audit results in Error: 5

PostPosted: Thu Jan 06, 2011 5:36 pm
by kierangarbutt
Hi Jan,

thanks for the reply, but I can't access the knowledgebase because it requires an active support subscription...which we don't have because it lapsed shortly before we started implementing Windows 7 machines.... are you able to copy the info from that article here? Many thanks in advance!

Re: Windows7 Audit results in Error: 5

PostPosted: Tue Jan 11, 2011 2:42 pm
by tccwrd
Shame shame! :) lol Here you are.

KB001317: Ports and Protocols required by the On-Demand Audit Feature
OVERVIEW
In order to use the Alloy Discovery On-Demand Audit feature, certain ports need to be opened and/or protocols enabled. If they are not, the On-Demand Audit feature may not function correctly.

REFERENCE
The following communication protocols and ports are required:

1.Ports 139 and 445 (TCP and UDP). Both incoming and outgoing traffic should be allowed.
2.The ARP protocol
3.The ICMP protocol
To test the availability:

1.View the computer via My Network Places or Network Neighborhood
2.Ping the machine in question