• State Not Answered
  • Locked Locked
  • Replies 5 replies
  • Subscribers 62 subscribers
  • Views 3929 views
  • Users 0 members are here
Options
Related
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Client QARS MMC access gives access denied

abhishek.roy
over 14 years ago
Hi All,

We have setup QARS 6.10 and intially we had set up client MMC to be used only by Domain Admin role holders. Now we are trying to expand it to other OPS team who use AD was group/User management. When  a non admin user tries to access QARS mmc from workstation, the following error occurs
" Failed to connect to Administration Serviceon <Server Name>
  Service cannot be contacted or access is denied.
  Verify that the service is started. Try to connect with a different user account. Access is Denied."

We have a role group rqars-soeusers which has been give Read All Properties on the domain. All users are members of this group so that they can access QARS.

If we make user memberof rApp-QRSAdmin group, the user can access qars but this gives full access over qars. 

Can someone help me to know what is the actual process to grant a normal user access to qars. We have already assigned tasks for these users in QARS.

Regards,
Abhi  
Parents
  • 0 over 14 years ago
    Another hint - look for Distributed COM Users local group membership on the box running the ARS Admin Service. Every user connecting to ARS Admin Service via any sort of client should be a member of this group.

    Typically, ARS Admin Service setup takes care of this by adding Authenticated Users wellknown to the Distributed COM Users. If this wasn't done, or Authenticated Users is too brad audience for you, please make sure Distributed COM Users is populated with the corresponding user accounts.
Reply
  • 0 over 14 years ago
    Another hint - look for Distributed COM Users local group membership on the box running the ARS Admin Service. Every user connecting to ARS Admin Service via any sort of client should be a member of this group.

    Typically, ARS Admin Service setup takes care of this by adding Authenticated Users wellknown to the Distributed COM Users. If this wasn't done, or Authenticated Users is too brad audience for you, please make sure Distributed COM Users is populated with the corresponding user accounts.
Children
No Data