Overview

When running remediation jobs, errors such as Access Denied or Incorrect username or password may occur, even though scan jobs complete successfully. These errors are typically caused by improper configuration of deployment credentials for remediation jobs. Ensuring that the appropriate credentials are configured properly can resolve the issue.

Solution

To resolve this issue, follow these steps:

1. Verify Deployment Credentials:

   • Ensure that the Deployment options for remediation jobs are configured correctly.
   • Choose Currently logged on user and check the option Use per computer credentials when available, as shown in the provided screenshot.
     

2. Set Alternative Credentials (if necessary):

   • If specific credentials are required for particular groups or computers, configure them in the group/computer properties.
     • If you need to only use the "Alternative Credentials" option within the "Global Credentials", then ensure that you deselect the option "Use per computer credentials when available".

"Currently logged on user" refers to the account running the GFI LanGuard 12 Attendant service. If that account cannot authenticate, LanGuard will try the alternative credentials specified at the computer/group level. Either of these should be configured properly to grant local administrative access to push the patches.

Note: Everything fails if the first connection attempt to access the remote machine is successful, but the Attendant Service account does not have sufficient administrative permissions. Moreover, Windows returns an 'Access denied' message to the application and does not attempt to use Alternative Credentials.

Reference Documentation

• • Best Practices for Setting up Account Permissions with Alternative Credentials in LanGuard