Deploying System Center Operations Manager 2007 agents using the Install-Agent cmdlet fails with error 80070520

Article ID: 2627700 - View products that this article applies to.
Expand all | Collapse all

Summary

Deploying agents from the Operations Manager Shell using the Install-Agent cmdlet results in error 0x80070520 (ERROR_NO_SUCH_LOGON_SESSION), with the description “A specified logon session does not exist. It may already have been terminated.” Event ID 10612 in the Operations Manager event log is also logged: 

Event Type: Error
Event Source: Health Service Modules
Event Category: None
Event ID: 10612
Description:
The Operations Manager Server failed to perform specified operation on computer MANAGEMENTSERVER.FQDN.
 
Operation: Agent Install
Install account: DOMAIN\ACCOUNT
Error Code: 80070520
Error Description: A specified logon session does not exist. It may already have been terminated.

The error is returned when an attempt is made to store the credentials used to deploy the agent in a context that is not permitted. This can be a result of a policy setting, or the inability to store the credentials under the Local System account.

To check if it is policy related, on the Management Server specified when calling the Install-Agent cmdlet, open Local Security Policy from Administrative Tools. Navigate to Local Polices->Security Options. For Windows Server 2003 locate the policy “Network access: Do not allow storage of credentials or .NET Passports for network authentication”, or for Windows Server 2008 locate the policy “Network access: Do not allow storage of passwords and credentials for network authentication”. Ensure this policy is disabled.

This policy controls the following registry value:
KEY: HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa
VALUE: disabledomaincreds
SETTING: 0 – disabled, 1 – enabled

The other possibility is that the credentials are attempting to be stored under the Local System account which is not possible. Check the Default Action Account profile for the Management Server specified when calling the Install-Agent cmdlet. If the Management Server’s Default Action Account is set to Local System, change it to a domain account with the appropriate permissions. This also applies to Gateway Servers being used to deploy agents as well.

More Information

Network access: Do not allow storage of credentials or .NET Passports for network authentication
http://technet.microsoft.com/en-us/library/cc779377(WS.10).aspx

Account Information for Operations Manager 2007
http://technet.microsoft.com/en-us/library/bb735419.aspx
Note This is a "FAST PUBLISH" article created directly from within the Microsoft support organization. The information contained herein is provided as-is in response to emerging issues. As a result of the speed in making it available, the materials may include typographical errors and may be revised at any time without notice. See Terms of Use for other considerations.

Properties

Article ID: 2627700 - Last Review: October 17, 2011 - Revision: 1.0
APPLIES TO
  • Microsoft System Center Operations Manager 2007
  • Microsoft System Center Operations Manager 2007 R2
  • Microsoft System Center Operations Manager 2007 Service Pack 1
Keywords: 
KB2627700

Give Feedback

 

Contact us for more help

Contact us for more help
Connect with Answer Desk for expert help.
Get more support from smallbusiness.support.microsoft.com