8 replies to this topic

[zlorimer]

I keep receiving Access Denied errors when I am trying to reset a password. I have created a service account for the password management tasks and have followed the Rights settings as defined here: http://www.netwrix.com/kb_n5c2_9XHH

Also, I have my PM setup to email me and the error I get in the Email looks like this:
Account Name: DOMAIN\user
Date: 11/26/2012 2:23:50 PM
Result: Access is denied
Performed by: NT AUTHORITY\IUSR


However, I consistently get Access Denied, unless I make the account a Domain Admin, which I don't want to do. What am I missing here?

Specs:
Netwrix PM v6.1.345.0
Windows Server 2008 R2 (fully up to date)

[Tommy Garvin]

Hi, zlorimer.

Can you please clarify the situation?
Does the access denied error occur for all users or only for several?

The thing is that less privileged service account is not able to unlock and reset passwords for privileged groups (domain admins, enterprise admins, etc) because of AdminSDHolder mechanism. You can find more information about it here:
http://blogs.technet...and-sdprop.aspx

As a test, can you please create a new regular user which is a member of only Domain Users group and try it?

- Tommy

[FlaviaNode]

I have been a very satisfied user of AddEmail for several months. The product has been working perfectly until yesterday when I now receive Error 530 Access Denied whenever I try to send an email?

Oops, it turns out an administrator changed my email password, so our code was sending the wrong password to the SMTP Server.

[ashfaque]

I am also facing same issue please help to understand me actual issue as it was working fine from last couple of months and suddenly getting this issue.

[ashfaque]

Hi All,

 

As we are running Netwrix password manger in windows server 2012 and on other windows server 2012 machine we have configured AD(active directory).

 

Now we are trying to change our password using Netwrix password manager however getting error "Access denied"

It was working fine from couple of months however recently we are facing such an issue access denied while trying to change/reset password for all users.

Please help to solve this issue I will thankful of you.

 

Thanks,

Ashfaque

[andrew.gahlbeck@occompt.co]

I have this same problem.. Has there been a solution to this forum post?

 

Hello,

 

Account reset performed with NetWrix Password Manager.

 

Account Name: Domain\User

Date: 4/11/2016 12:04:07 PM

Result: Unlocking account failed: Insufficient RightsAccess is denied Performed by: NT AUTHORITY\IUSR

ClientIP: IP Adress

[Tamksfer]

I am also facing same issue please help to understand me actual issue as it was working fine from last couple of months and suddenly getting this issue.

You are not the only one , i've had similar problems when recover Windows password ,i think we should try some simple methods,like the Ophcrack, uukeys, iseepassword , because some complicated schemes can lead to mistakes , 

[davidjren]

my problems that's similar your issue on windows 7

[Kirill K]

Access denied mostly is caused by lack of permissions of Password Manager service account which are necessary while performing an operation(eg password change) on an user account.

 

Basically it can be simply identified assigning domain admins rights to Password Manager service account, if the error is no more appeared, the next step review "4.3. Configuring Service Account Permissions" of "NETWRIX PASSWORD MANAGER ADMINISTRATOR’S GUIDE" and make sure all necessary permissions are in place.