Troubleshooting CA ARCserve Central Protection Manager › Access Denied Errors Occur when Adding a Node by IP/Name

Access Denied Errors Occur when Adding a Node by IP/Name

Valid on all Windows operating systems that support User Account Control (UAC).

Note: Windows Vista or later versions.

Symptom:

When you add nodes from the Add node by IP/Name dialog using a new Windows user account that is not a built-in administrator or domain user account and is a member of the administrators group, the following message displays:

Access is denied. Verify user has administrator privilege and the remote registry access is not restricted by local security policy of the added machine.

The result is that you cannot add the node.

Solution:

You can expect this behavior when UAC is enabled on computers running a Windows operating system that supports UAC. UAC is a Windows feature that allows only the Administrator account to log in to the computer from a remote location.

Use one of the following methods to resolve this issue:

Disable Remote UAC:

1. Click Start, type regedit in the Search programs and files field, and then press Enter, which opens Windows Registry Editor.

   Note: You may need to provide administrative credentials to open Windows Registry Editor.

2. Locate and click the following registry key:

   HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System

3. From the Edit menu, click New and then click DWORD (32-bit) Value.
4. Specify LocalAccountTokenFilterPolicy as the name for the new entry and then press Enter.
5. Right-click LocalAccountTokenFilterPolicy and then click Modify.
6. Specify 1 in the Value data field and then click OK.
7. Exit the Registry Editor.

Disable UAC:

1. Log in to the node using the Administrator account.
2. Open Windows Control Panel.
3. Open User Accounts.
4. From the Make changes to your user account screen, click Change User Account Control Settings and then do one of the following:
   • Windows Vista and Windows Server 2008: On the Make changes to you user account screen, click Turn User Account Control on or off. Then on the Turn on User Account Control (UAC) to make your computer more secure screen, clear the check box next to Use User Account Control (UAC) to help protect your computer, and click OK.

     Restart your computer to apply the changes to UAC.

   • Windows Server 2008 r2 and Windows 7: On the Choose when to be notified about changes to your computer screen, move the slider from Always notify to Never notify. Click OK, close Windows Control Panel.

Restart your computer to apply the changes to UAC.