Problem:
- When opening up the console on the core, some of the devices will not have the binocular icon by them. When you right-click the device, you will be unable to reboot the device or run patch/compliance scan on the device. Another symptom may be that the following error occurs when requesting a certificate with brokerconfig.exe:
"Failed to retrieve certificate."
Inside the brokerconfig.log in the ManagementSuite directory on the core shows an error similar to this error:
Wed, 06 Jun 2007 10:59:01 Processing Certificate Request File C:\Program Files\LANDesk\ManagementSuite\brokerreq\4d21.83472873b48a7c1.csr
Wed, 06 Jun 2007 10:59:01 Verifying inventory id {Device ID here} of [IP address of client] ip address [IP address of client]
Wed, 06 Jun 2007 10:59:01 Unable retrive ldping information from [IP address of client] 801901F4
Testing ldping on the client machine returns an http 500 error. Testing can be performed on the client itself at http://localhost:9595/allowed/ldping or remotely at http://[client name or IP]:9595/allowed/ldping.
If the ldping command returns an XML file then it was successful.
Cause
- The Authenticated Users group was removed from the Users security group group on the client machines. (Note: This on the client machines and not on the core server.)
Resolution
- Add the Authenticated Users group back to the Users security group on the client machines by doing the following:
- Open the Start Menu then right-click on My Computer (Computer on Vista/Windows 7) and select manage.
- Expand Local Users and Groups.
- Left-click Groups, then right-click on Users security group and select Add to Group...
- Select Add, then select Locations.
- Select the local computer and then select OK. (Do not select the Domain)
- Type Authenticated Users and then select OK.
- Verify that the Authenticated Users group has been added under Members, then select OK.