System Error. Code5 Access is Denied

Harroguk · Post by **Harroguk** » Sun Jan 06, 2008 9:58 am

Hi,

You helped me the other day with a couple of problems I was having getting some tests to work on our domain controller. I have set up an identical set of tests to monitor the other domain controller in the same domain.

However I have 5 of these tests that dont work (Event Log Monitoring and Drive Space Monitoring). 3 of the tests are working as intended (Ping, CPU Usage and Free Memory)

Any other insights you can give would be much appreciated. Thanks

Harro

Working...

Code: Select all

;-----------------------------------------------------------------------------
;- HostMonitor`s export/import file                                          -
;- Generated by HostMonitor at 06/01/2008 15:33:28                           -
;- Source file: C:\Program Files\HostMonitor6\KS Host Configuration.hml     -
;- Generation mode: Selected_Tests                                           -
;-----------------------------------------------------------------------------


; ------- Test #01 -------


Method      = Ping
;--- Common properties ---
DestFolder  = Root\BladeCenter1\BC1/S12 - [ServerName] \
Title       = [ServerName] - Alive - Ping
Comment     = Alive - Ping
RelatedURL  = 
ScheduleMode= Regular
Schedule    = 
Interval    = 60
Alerts      = Message, Sound
ReverseAlert= No
UnknownIsBad= Yes
WarningIsBad= Yes
UseCommonLog= Yes
PrivLogMode = Default
CommLogMode = Default
SyncCounters= Yes
SyncAlerts  = No
DependsOn   = list
MasterTest-Alive = BladeCenter 1 - Alive - Management Module
;--- Test specific properties ---
Host        = [ServerIP]
Timeout     = 2000
Retries     = 4
MaxLostRatio= 100
DisplayMode = time
DontFragment= No


; ------- Test #02 -------


Method      = CPU
;--- Common properties ---
DestFolder  = Root\BladeCenter1\BC1/S12 - [ServerName]\
Title       = [ServerName] - CPU Usage
Comment     = CPU Usage
RelatedURL  = 
ScheduleMode= Regular
Schedule    = 
Interval    = 60
Alerts      = Message, Sound
ReverseAlert= No
UnknownIsBad= Yes
WarningIsBad= Yes
UseCommonLog= Yes
PrivLogMode = Default
CommLogMode = Default
SyncCounters= Yes
SyncAlerts  = No
DependsOn   = list
MasterTest-Alive = [ServerName] - Alive - Ping
;--- Test specific properties ---
Computer    = \\[ServerIP]
OS          = NT
MaxCPUUsage = 95
Username    = [Domain]\[ServiceAccount]
Password    = [ServiceAccountPassword]


; ------- Test #03 -------


Method      = PerfCounter
;--- Common properties ---
DestFolder  = Root\BladeCenter1\BC1/S12 - [ServerName]\
Title       = [ServerName] - Free Memory
Comment     = Free Memory
RelatedURL  = 
ScheduleMode= Regular
Schedule    = 
Interval    = 600
Alerts      = Message, Sound
ReverseAlert= No
UnknownIsBad= Yes
WarningIsBad= No
UseWarning  = Yes
WarningExpr = (("%SuggestedSimpleStatus%"=="UP") and ("%SuggestedReply%">="256") and ("%SuggestedReply%"<="512"))
UseCommonLog= Yes
PrivLogMode = Default
CommLogMode = Default
SyncCounters= Yes
SyncAlerts  = No
DependsOn   = list
MasterTest-Alive = [ServerName] - Alive - Ping
;--- Test specific properties ---
PerfCounter = \\[ServerIP]\Memory\Available MBytes
Condition   = LessThan
Value       = 256.00
DisplayMode = AsIs
Username    = [Domain]\[ServiceAccount]
Password    = [ServiceAccountPassword]

Not Working...

Code: Select all

; ------- Test #04 -------


Method      = NTLog
;--- Common properties ---
DestFolder  = Root\BladeCenter1\BC1/S12 - [ServerName] \
Title       = [ServerName] - Event Log (Application)
Comment     = Event Log
RelatedURL  = 
ScheduleMode= Regular
Schedule    = 
Interval    = 1800
Alerts      = Message, Sound
ReverseAlert= No
UnknownIsBad= Yes
WarningIsBad= Yes
UseCommonLog= Yes
PrivLogMode = Default
CommLogMode = Default
SyncCounters= Yes
SyncAlerts  = No
DependsOn   = list
MasterTest-Alive = [ServerName] - Alive - Ping
;--- Test specific properties ---
Computer    = [ServerIP]
Log         = Application
Source      = 
Username    = [Domain]\[ServiceAccount]
Password    = [ServiceAccountPassword]
CheckComp   = Any
CheckType   = AnyFromList
CheckID     = Any
CheckDescr  = Any
CompList    = 
TypeList    = Error
IDList      = 
DescrList   = 
ReportMode  = LastEvent


; ------- Test #05 -------


Method      = NTLog
;--- Common properties ---
DestFolder  = Root\BladeCenter1\BC1/S12 - [ServerName]\
Title       = [ServerName] - Event Log (Security)
Comment     = Event Log
RelatedURL  = 
ScheduleMode= Regular
Schedule    = 
Interval    = 1800
Alerts      = Message, Sound
ReverseAlert= No
UnknownIsBad= Yes
WarningIsBad= Yes
UseCommonLog= Yes
PrivLogMode = Default
CommLogMode = Default
SyncCounters= Yes
SyncAlerts  = No
DependsOn   = list
MasterTest-Alive = [ServerName] - Alive - Ping
;--- Test specific properties ---
Computer    = [ServerIP]
Log         = Security
Source      = 
Username    = [Domain]\[ServiceAccount]
Password    = [ServiceAccountPassword]
CheckComp   = Any
CheckType   = AnyFromList
CheckID     = Any
CheckDescr  = Any
CompList    = 
TypeList    = Error
IDList      = 
DescrList   = 
ReportMode  = LastEvent


; ------- Test #06 -------


Method      = NTLog
;--- Common properties ---
DestFolder  = Root\BladeCenter1\BC1/S12 - [ServerName]\
Title       = [ServerName] - Event Log (System)
Comment     = Event Log
RelatedURL  = 
ScheduleMode= Regular
Schedule    = 
Interval    = 1800
Alerts      = Message, Sound
ReverseAlert= No
UnknownIsBad= Yes
WarningIsBad= Yes
UseCommonLog= Yes
PrivLogMode = Default
CommLogMode = Default
SyncCounters= Yes
SyncAlerts  = No
DependsOn   = list
MasterTest-Alive = [ServerName] - Alive - Ping
;--- Test specific properties ---
Computer    = [ServerIP]
Log         = System
Source      = 
Username    = [Domain]\[ServiceAccount]
Password    = [ServiceAccountPassword]
CheckComp   = Any
CheckType   = AnyFromList
CheckID     = Any
CheckDescr  = Any
CompList    = 
TypeList    = Error
IDList      = 
DescrList   = 
ReportMode  = LastEvent


; ------- Test #07 -------


Method      = UNC
;--- Common properties ---
DestFolder  = Root\BladeCenter1\BC1/S12 - [ServerName]\
Title       = [ServerName] - Free Space - C:\
Comment     = Drive Space C:\
RelatedURL  = 
ScheduleMode= Regular
Schedule    = 
Interval    = 60
Alerts      = Message, Sound
ReverseAlert= No
UnknownIsBad= Yes
WarningIsBad= Yes
UseCommonLog= Yes
PrivLogMode = Default
CommLogMode = Default
SyncCounters= Yes
SyncAlerts  = No
DependsOn   = list
MasterTest-Alive = [ServerName] - Alive - Ping
;--- Test specific properties ---
UNC         = \\[ServerIP]\c$\
test        = totalfreespace
MinFreeSpace= 20%
username    = [Domain]\[ServiceAccount]
password    = [ServiceAccountPassword]


; ------- Test #08 -------


Method      = UNC
;--- Common properties ---
DestFolder  = Root\BladeCenter1\BC1/S12 - [ServerName]\
Title       = [ServerName] - Free Space - D:\
Comment     = Drive Space D:\
RelatedURL  = 
ScheduleMode= Regular
Schedule    = 
Interval    = 60
Alerts      = Message, Sound
ReverseAlert= No
UnknownIsBad= Yes
WarningIsBad= Yes
UseCommonLog= Yes
PrivLogMode = Default
CommLogMode = Default
SyncCounters= Yes
SyncAlerts  = No
DependsOn   = list
MasterTest-Alive = [ServerName] - Alive - Ping
;--- Test specific properties ---
UNC         = \\[ServerIP]\d$\
test        = totalfreespace
MinFreeSpace= 20%
username    = [Domain]\[ServiceAccount]
password    = [ServiceAccountPassword]

;-----------------------------------------------------------------------------
; Exported 8 items

Harroguk · Post by **Harroguk** » Sun Jan 06, 2008 10:07 am

Extra info you may need.

Version of HostMonitor - 7.22c
Hostmonitor is running on Server 2003 Standard SP1
RCC is Running on XP Pro SP2
Machine to be tested is Server 2003 Standard SP1
HostMonitor is running as a service
Tests are being set up via the RCC

KS-Soft · Post by **KS-Soft** » Mon Jan 07, 2008 3:31 pm

Normally CPU Usage and Performance Counter test methods require admin rights, RPC service, Remote Registry service, TCP ports above 1023 should be opened on firewall and so on.
This mean if CPU Usage test is working, all other tests against the same system should work as well.
So, its strange NT Event Log and UNC tests do not work

All 8 tests checks the same remote system, right?
As I see you have not specified user account for test item #5 and #6, this can be the reason of the problem. On the other hand you have specified account for test #4 that does not work either...

I would recommend to enable "Show errors description in Reply field when cannot access resource" option for UNC tests. This option located on Misc page in the Options dialog.
HostMonitor will provide more information about problem related to UNC tests. Probably this will help to resolve both issues

Regards
Alex

Harroguk · Post by **Harroguk** » Mon Jan 07, 2008 5:49 pm

Thanks for the guidance, I am out of the office until the weekend so will see what further information I can find out for you then.

Thanks again,

Harroguk

Harroguk · Post by **Harroguk** » Tue Aug 12, 2008 4:22 am

Okay, it has been a while but I have finally got time to look into this again.

The tests as stated above have not changed however we have now upgraded to v7.22c of Hostmonitor.

The 3 tests which are not working have now all been modified so that they are using an account that is a member of the Domain Admins group.

The issue however still remains that I am unable to monitor the Event Logs or UNC tests on a Domain Controller via KS-Hostmonitor.

The message in teh Reply field reads "System Error. Code 5. Access is denied"

Any help you can give would be much appreciated.

Thanks

Harroguk

Harroguk · Post by **Harroguk** » Tue Aug 12, 2008 4:48 am

KS-Soft wrote:I would recommend to enable "Show errors description in Reply field when cannot access resource" option for UNC tests. This option located on Misc page in the Options dialog.
HostMonitor will provide more information about problem related to UNC tests. Probably this will help to resolve both issues

The reply to the UNC test is again "Access is denied" however this test is also using a user in the Domain Admins Group.

KS-Soft · Post by **KS-Soft** » Wed Aug 13, 2008 12:53 pm

\\[ServerIP]\c$\

Could you create another shared resource that points to disk C and use it for testing?

Another posible solution: use WMI test with query like select FreeSpace from Win32_LogicalDisk where deviceid='C:'
If you want convert bytes into megabytes, you may use "TuneUp Reply" option and expression like [%SuggestedReply% div 1024 div 1024]

Regards
Alex

LesPaul11 · Post by **LesPaul11** » Mon Sep 01, 2008 5:45 am

Alex

I work alongside Harroguk - he is on vacation at the moment.

I can create an additional shared resource to the C: drive root which does connect successfully using the same credentials.

KS-Soft wrote:
\\[ServerIP]\c$\
Could you create another shared resource that points to disk C and use it for testing?

However, I can connect to the target UNC (\\[ServerIP]\c$) directly when logged in to the Hostmonitor server with the same credentials. Surely this means our problem is not connectivity related?

KS-Soft · Post by **KS-Soft** » Mon Sep 01, 2008 8:15 am

No, its not connection related problem. "Access denied" means you do not have rights to use resource

Regards
Alex

LesPaul11 · Post by **LesPaul11** » Mon Sep 01, 2008 9:20 am

LesPaul11 wrote:However, I can connect to the target UNC (\\[ServerIP]\c$) directly when logged in to the Hostmonitor server with the same credentials. Surely this means our problem is not connectivity related?

Does this not disprove it being a permissions related issue also?

KS-Soft · Post by **KS-Soft** » Mon Sep 01, 2008 5:41 pm

We can play around for long time. I think the best way to check what exactly is going on in your network - use some network packet analyzer (sniffer).

Regards
Alex