Manual client registration fails with insufficient priviledges

3 users found this article helpful

Symptoms

pma_isv_proxy_service.log:
11-27 10:48:46.288 W /AzManWrap:23104:40ac/ Could not initialize client context from 'S-1-5-21-111111111111-11111111-11111111-11111111': 80070005 (Access is denied)
11-27 10:48:46.288 W /AuthzManager:23104:40ac/ Access is denied

Mac Client registration fails with the following error:

When registration is performed under Domain Admins member it works fine but when it is performed with a member of Domain Users group it fails.

Domain Users group is a member of Enrollers role:

NOTE: This article is applicable only if the above-mentioned symptoms are observed as explained or very similar.

Cause

Service account that is used for running Parallels Configuration Manager Proxy service does not have appropriate permissions when registration is attempted with account that is not a member of Windows Authorization Access Group (Active Directory group under Builtin OU):

Resolution

Parallels Configuration Manager Proxy service account should be added to Windows Authorization Access Group.

Was this article helpful?

Tell us how we can improve it.