Overview

The agent installation from the LanGuard console fails; each scanning or remediation operation on target Windows machine is showing an 'Access denied' error. The administrative share or remote registry access checks for the target Windows computers also fail with an access denied.

This article provides information on how to fix the 'Access denied' issue.

Solution

The described above issues can be caused by missing requirements, incorrect credentials or permissions, or User Access Control interfering with LanGuard operations.

1. Ensure that all the required settings for successful operations are in place.
2. In the LanGuard console Dashboard, check the properties of the target machine(s). If alternative credentials are set up, verify whether they are required, are correct, and have the necessary rights on the target machine(s). Refer to the Best Practices for Setting up Account Permissions with Alternative Credentials in LanGuard for more information.
3. Thoroughly Verify the Required Network Connectivity and Security Permissions for LanGuard Operations.
4. User Account Control may the root cause. Address this by following the steps below:
   1. Open the registry editor on the target machine(s).
   2. Go to [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System].
   3. Create a new DWORD named LocalAccountTokenFilterPolicy
   4. Set the DWORD value to "1".

Testing

Repeat the operation that was having issues and verify that the error no longer appears. If the issue persists, contact GFI LanGuard Support.