Overview

Remediation is not working for some of the machines, and the job details display an error:

Error: The server process could not be started because the configured identity is incorrect.

Solution

Ensure Administrator Credentials are used for LNSSCommunicator

1. Open DCOMCNFG - press Windows + R keys together, type dcomcnfg and press the Enter key.
2. Expand Component Services > Computers > My Computer > DCOM Config.
3. Locate LNSSCommunicator, right-click on it, and open Properties.
4. Go to Identity > Browse and enter a user with Administrator rights on all machines in the domain. 
   

   

   The GFI LanGuard Attendant service usually launches LNSSCommunicator. If the Attendant service is running under a domain account with the required permissions, you can set the identity to The launching user instead.

5. Enter the password for the selected user and Apply changes. 

Add the Account above to Local Security Policies

1. Open Local Security Policy gpedit.msc on the LanGuard server.
2. Navigate to Local Computer Policy > Computer Configuration > Windows Settings > Security Settings > Local Policies > User Rights Assignment.
3. Check the Properties of Replace a process level token and Adjust memory quotas for process policies.
4. Add the account used in the Identity tab to this policy.
5. Do the same for the Logon as a batch job policy.
6. Restart the GFI LanGuard Attendant service.

Launch the remediation job that was giving an error. If the issue persists, incorrect remediation settings may be used if you are using alternative credentials for the target machines. In the remediation job settings click Customize in the Credentials section and check the "Use per computer credential when available."