Access denied when trying to manage a computer remotely

[Elly Poppe]

Hi,

I've seen a couple of posts related to this problem, but I
didn't see a resolution. My problem is this, I've recently
upgraded most of our desktops to WXP. Our servers our
running W2k. Since the Upgrade, when I try to manage
local users and groups (or view the Event Viewer)through
the Computer management console (from an XP workstation),
I get an error: access denied. I can still do this from
the servers running W2k. Also, I can manage workstations
still running W2k. And frustratingly enough I have one
(and only one) WXP station that I can remotely manage.
I've been through this workstation with a fine tooth comb
looking for differences. It is in the same OU with the
other PCs. Does anyone know what account is trying to
access the remote computer and what is actually being
accessed. Is it the registry? Also, is there a reference
that anyone knows about that tells what security changes
were made in XP. I've ran into a couple of other access
related issues, but were able to resolve them. I would
appreciate any ideas that anyone might have, I've been
searching for days looking for a hint as to where to look
next!
Thanks in advance,

Elly

[davetest]

On Thu, 6 Nov 2003 12:16:43 -0800, "Elly Poppe"
> wrote:

>Hi,
>
>I've seen a couple of posts related to this problem, but I
>didn't see a resolution. My problem is this, I've recently
>upgraded most of our desktops to WXP. Our servers our
>running W2k. Since the Upgrade, when I try to manage
>local users and groups (or view the Event Viewer)through
>the Computer management console (from an XP workstation),
>I get an error: access denied. I can still do this from
>the servers running W2k. Also, I can manage workstations
>still running W2k. And frustratingly enough I have one
>(and only one) WXP station that I can remotely manage.
>I've been through this workstation with a fine tooth comb
>looking for differences. It is in the same OU with the
>other PCs. Does anyone know what account is trying to
>access the remote computer and what is actually being
>accessed. Is it the registry? Also, is there a reference
>that anyone knows about that tells what security changes
>were made in XP. I've ran into a couple of other access
>related issues, but were able to resolve them. I would
>appreciate any ideas that anyone might have, I've been
>searching for days looking for a hint as to where to look
>next!
>Thanks in advance,
>
>Elly
Have you checked to see if there are any policy differences on
the PC's?
start/help and support/use tools to view your computer info...
Advanced system information/view group policy settings applied.

Dave

[Elly Poppe]

Thanks Dave,

I looked at the group policy settings and No there aren't
any differences. I do have a couple of machines that are
blocking inheritence of Group policy and the problem
exists there also. I compared the services that are
running on the two machines and the only difference there
is wzcsvc.exe (which I believe has to do with wireless
connectivity) and MDM.exe (which has to do with
debugging). So it doesn't look like a stopped service is
the culprit.
I'll keep looking - anymore ideas are appreciated!
Elly
>-----Original Message-----
>On Thu, 6 Nov 2003 12:16:43 -0800, "Elly Poppe"
> wrote:
>
>>Hi,
>>
>>I've seen a couple of posts related to this problem, but
I
>>didn't see a resolution. My problem is this, I've
recently
>>upgraded most of our desktops to WXP. Our servers our
>>running W2k. Since the Upgrade, when I try to manage
>>local users and groups (or view the Event Viewer)through
>>the Computer management console (from an XP
workstation),
>>I get an error: access denied. I can still do this from
>>the servers running W2k. Also, I can manage
workstations
>>still running W2k. And frustratingly enough I have one
>>(and only one) WXP station that I can remotely manage.
>>I've been through this workstation with a fine tooth
comb
>>looking for differences. It is in the same OU with the
>>other PCs. Does anyone know what account is trying to
>>access the remote computer and what is actually being
>>accessed. Is it the registry? Also, is there a
reference
>>that anyone knows about that tells what security changes
>>were made in XP. I've ran into a couple of other access
>>related issues, but were able to resolve them. I would
>>appreciate any ideas that anyone might have, I've been
>>searching for days looking for a hint as to where to
look
>>next!
>>Thanks in advance,
>>
>>Elly
>Have you checked to see if there are any policy
differences on
>the PC's?
>start/help and support/use tools to view your computer
info...
>Advanced system information/view group policy settings
applied.
>
>Dave
>.
>

[Shain Wray [MSFT]]

Hello Elly,

The following KB article should address your issue -

314837 How to Manage Remote Access to the Registry
http://support.microsoft.com/?id=314837

Best regards,
--
Shain Wray
Microsoft PSS Security Team

This posting is provided "AS IS" with no warranties and confers no rights.
Please reply to the newsgroup so that others may benefit. Thanks!