Overview

You are having issues scanning devices with the domain admin account. The same credentials are used for running the services.

Solution

The "Access is denied" error when scanning using the domain admin account can be caused by environmental variables, such as multi-domain issues, or GPO policy restrictions.

By default, scans are performed by the account being used to run the GFI LanGuard Attendant service. If they fail, the alternative credentials will be used (if any are set up for the machine or job). In order to solve the error:

1. If you have a multi-domain environment, follow the Best practices for setting up account permissions with alternative credentials in LanGuard. For a single domain, if the correct domain administrator credentials are used to run the Attendant service, there is no need to use alternative credentials.
2. There are various GPO policies introducing security restrictions in the domain. For example, the policy may restrict the domain account from having local administrator access on the target machines - this third party link may be useful in such cases. Or another policy may prevent all the domain servers to log in to other servers even with the domain admin credentials. Verify GPO policies and resolve any restrictions with the help of your AD administrators.
3. If everything else fails, try using a Local admin service account with some unique name to run the Attendant service and Domain admin account for the scanning job/computers alternative credentials.

Testing

Once the root cause is identified and fixed, rerun the scan and verify that it is completed successfully. If the issue persists, contact GFI LanGuard Support.