Windows-Admin-Center-Ideas-and-Feedback icon indicating copy to clipboard operation
Windows-Admin-Center-Ideas-and-Feedback copied to clipboard

WAC suddenly not accepting existing credentials when connecting to servers

Open MarcLaf opened this issue 3 years ago • 0 comments

Platform where Windows Admin Center is installed (Windows 10 or Windows Server): Windows Server 2019 Standard If installed on Server, what is the Windows version of the machine running the browser to access Windows Admin Center: 10.0.17763 N/A Build 17763 Are you using the self-signed certificate created by the installer?: No, using own certificate. If you are using your own certificate, does the subject name match the machine?: Yes If you are using your own certificate, does it specify an alternate subject name?: Yes Did you install with the default port setting?: I don't remember If not, which port did you specify? 443 Is the machine where Windows Admin Center is installed joined to a domain?: Yes Is the machine that you are trying to manage joined to a domain?: Yes What browser are you using? Microsoft Edge (Chromium) WAC Version: 2110.2

WAC has been setup and working for a while now (aside from the odd connection issues) and double-hop has been configured for every server being managed (using Set-ADComputer -Identity $serverObject -PrincipalsAllowedToDelegateToAccount $wacObject method) Today I started getting issues when connecting to servers (not all and not all the time) where it would prompt for the credentials to use (as in before you setup doublehop). Even entering my credentials it would not connect. If I cancelled that and tried again, sometimes it would work, other times there would be additional errors.

There are a lot of Warnings in Event Viewer (EvID 0 - Impersonation request was called within impersonated context.) but that's the only one. When a connection fails there is an Error.

sessionId : 121be499-2e46-4cae-ad9c-a0205d210648
eventId : Trace
level : Error
sourceName : msft.sme.shell
source : ToolConditionValidator
timestamp : 1655147976713
message : msft.sme.packetmon!main: Connecting to remote server _servername.domain.com_ failed with the following error message : Access is denied. For more information, see the about_Remote_Troubleshooting Help topic.
stack : 
moreEventData :  

I have tried rebooting both WAC server and the server being managed but issue is still there. I also tried to reinstall the application (using change install option but keeping everything the same) and again, issue is still there.

Other things like not being able to onboard to Azure Update Management (it says it's successful but after refreshing the status disappears) and adding tags to the server connection page doesn't seem to save. The last time I started experiencing many issues I had to completely remove and reinstall WAC but I'd rather not have to do that.

MarcLaf avatar Jun 13 '22 19:06 MarcLaf