Important This article contains information about how to modify the registry. Make sure to back up the registry before you modify it. Make sure that you know how to restore the registry if a problem occurs. For more information about how to back up, restore, and modify the registry, click the following article number to view the article in the Microsoft Knowledge Base:
256986 Description of the Microsoft Windows registry
Symptoms
When you try to automatically deploy agents by using a Microsoft Operations Manager (MOM) 2005 Management Server that is running Microsoft Windows Server 2003 with Service Pack 1 (SP1), you receive the following error message:
- Error Code: -2147023584
Error Description: A specified logon session does not exist. It may have already been terminated.
Additionally, the Task Status view in the MOM Operator console contains Warning event number 9899. The description for this event contains the error message.
Additionally, the following event may be logged in the Application event log:
Cause
This problem occurs if the following conditions are true:
-
The Network access: Do not allow storage of credentials or .NET Passports for network authenticationpolicy is enabled and applies to the Management Server. (This policy is an Active Directory directory service policy.)
-
You have applied hotfix 895195 to the Management Server. Or, the Management Server is running MOM 2005 SP1.
Resolution
Warning Serious problems might occur if you modify the registry incorrectly by using Registry Editor or by using another method. These problems might require that you reinstall your operating system. Microsoft cannot guarantee that these problems can be solved. Modify the registry at your own risk.
To resolve this problem, follow these steps on the Management Server:
-
Click Start, click Run, type gpedit.msc, and then click OK.
-
Under Computer Configuration, expand Windows Settings, expand Security Settings, expand Local Policies, and then expand Security Options.
-
In the Policy pane, right-click Network access: Do not allow storage of credentials or .NET Passports for network authentication, click Properties, click to select Disabled, and then click OK.
-
Click Start, click Run, type regedit, and then click OK.
-
Locate and then right-click the following registry subkey:
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa
-
Verify that the disabledomaincreds value is set to 0.
-
Restart the computer.
Status
Microsoft has confirmed that this is a problem in the Microsoft products that are listed in the "Applies to" section.
More Information
The Management Server uses Windows Credential Manager to store the credentials of the account that is specified to perform agent installation. If the Network access: Do not allow storage of credentials or .NET Passports for network authenticationpolicy is enabled and applied to the Management Server, Credential Manager cannot store the agent installation account credentials.
