Symantec Management Platform (Notification Server)

Hello,

one of our customers has an issue with registering one of its taskservers. Here some information about his configuration.

Taskservice Server:

Windows Server 2003 with IIS6 installed. Former NS6 TaskService /PackageService upgraded to NS7.1. This machine also hosts a DS6.9 PXE Server.

The custumer is using a service account as application identity. This user isn't domain admin but local administrator on every machine where it's needed.

First we got this message from the tasktmanagment.log

 <entry process="AtrsHost" source="unk" time="10/28/2011 3:43:29 AM" type="Info" >
  <![CDATA[NotificationServerWebConnection::Initialize(): Using default credentials.]]>
 </entry>
 <entry process="AtrsHost" source="unk" time="10/28/2011 3:43:29 AM" type="Warning" >
  <![CDATA[ClientTaskServer.RegisterTaskServer(): Failed to register: System.Exception: Error response returned from server: Altiris.NS.Exceptions.AeXUnauthorizedAccessException: The current user does not have required permission 'read' to load item '37b0ac4c-bdc1-4fb8-ba4b-eaa1bff30ecb'.

After removing siteserver role, uninstalling Symantec Management Agent and ISS then reinstalling it all we now get a different error with the same result.

 <entry process="AtrsHost" source="unk" time="11/8/2011 5:17:59 PM" type="Info" >
  <![CDATA[NotificationServerWebConnection::Initialize(): Using default credentials.]]>
 </entry>
? <entry process="AtrsHost" source="unk" time="11/8/2011 5:17:59 PM" type="Warning" >
  <![CDATA[ClientTaskServer.RegisterTaskServer(): Failed to register: System.Net.WebException: The remote server returned an error: (401) Unauthorized.
   at System.Net.HttpWebRequest.GetResponse()
   at Altiris.ClientTask.Server.Communication.NotificationServerWebConnection.PostToNotificationServer(String url, ICredentials credentials, NSWebConnectionBuildRequestStreamDelegate requestStreamDelegate, Int32 nMaxAttempts, Int32 nTimeout)
   at Altiris.ClientTask.Server.Communication.NotificationServerWebConnection.PostToNotificationServerAndCheckResponse(String url, NSWebConnectionBuildRequestStreamDelegate requestStreamDelegate, Stream& responseStream, StreamReader& sr, XmlTextReader& r, Int32 nMaxAttempts, Int32 nTimeout)
   at Altiris.ClientTask.Server.Communication.NotificationServerWebConnection.PostToNotificationServerAndCheckResponse(String url, NSWebConnectionBuildRequestStreamDelegate requestStreamDelegate)
   at Altiris.ClientTask.Server.Communication.NotificationServerWebConnection.RegisterTaskServer(Guid secret, String version, Int32 build)
   at Altiris.ClientTask.Server.ClientTaskServer.RegisterTaskServer()]]>
 </entry>

See the attached file for details.

Thank you in advance.

Attachment(s)

taskmanagement.txt   22 KB 1 version

Is the system fully patched?  There have been some issues in Windows Server 2003 regarding IIS that are resolved by patches available through Windows Update.  If that's true, and you removed the agent and IIS, rebooted, reinstalled IIS, rebooted, and then added the site server components (exact steps), and it still isn't working.

Does it remain a DS 6.9 PXE server?  What is the administrator doing when he or she receives the error you've pasted?  I'm not sure from your post what action is kicking this error.

The error ocurred directly after the upgrade to 7.1. This has been performed by removing all NS6 components and then installing 7.1 components. The DS6.9 PXE Server has been installed and used the whole time and it still works fine.

Regarding the patchlevel I'm currently waiting for reply. Thank you.

They are using Windows Server 2003 R2 Standard SP2 both machines pully patched.

After rebooting the Notification Server the error seen in the taskmanagment.log has changed to the original one.

Error response returned from server: Altiris.NS.Exceptions.AeXUnauthorizedAccessException: The current user does not have required permission 'read' to load item '37b0ac4c-bdc1-4fb8-ba4b-eaa1bff30ecb'.

Next step is to open a case at Enterprise Support. I will post the solution when found.

Thanks again.

What if, after removing the components, you manually install the Task Service, per this KB?
http://www.symantec.com/docs/TECH42308