Hi friends,
I've installed Spiceworks in order to have more control over our workstations. There are only 9 workstations, and they're usually all within my visual range, so that's not too big of a deal. Still I need some overview to know their status regarding Windows hotfixes and net usage.
I've supplied Spiceworks with our internal IP range and with an account with admin rights.
It discovers all workstations fine, distinguishes servers from workstations and other devices; the inventory of my computer is really nice and elaborate - but that of the others not!
For most of them I get a scan error "Access denied Windows #80070005".
I have meanwhile managed to track the problem to Kerberos identification and an ID 7 error:
"The kerberos subsystem encountered a PAC verification failure. This indicates that the PAC from the client <client name> in realm <realm name> had a PAC which failed to verify or was modified. Contact your system administrator."
Great. I AM the system admin...
So I installed the MIT Network Identity Manager. My credentials are there, but when I try to add a new one, it always fails with "cannot resolve network address for KDC".
I don't get it!
My account was valid enough to let Spiceworks have NO SCAN ERROR on the Domain Controller itself!!
One client, a laptop on which I was logged in, could be scanned properly too.
I also have admin rights on all the workstations, all firewalls deactivated, so why don't my credentials work?
Any help greatly appreciated!
Thanks!
MiS
[navy]"We had to turn off that service to comply with the CDA Bill."[/navy]
- The Bastard Operator From Hell
I've installed Spiceworks in order to have more control over our workstations. There are only 9 workstations, and they're usually all within my visual range, so that's not too big of a deal. Still I need some overview to know their status regarding Windows hotfixes and net usage.
I've supplied Spiceworks with our internal IP range and with an account with admin rights.
It discovers all workstations fine, distinguishes servers from workstations and other devices; the inventory of my computer is really nice and elaborate - but that of the others not!
For most of them I get a scan error "Access denied Windows #80070005".
I have meanwhile managed to track the problem to Kerberos identification and an ID 7 error:
"The kerberos subsystem encountered a PAC verification failure. This indicates that the PAC from the client <client name> in realm <realm name> had a PAC which failed to verify or was modified. Contact your system administrator."
Great. I AM the system admin...
So I installed the MIT Network Identity Manager. My credentials are there, but when I try to add a new one, it always fails with "cannot resolve network address for KDC".
I don't get it!
My account was valid enough to let Spiceworks have NO SCAN ERROR on the Domain Controller itself!!
One client, a laptop on which I was logged in, could be scanned properly too.
I also have admin rights on all the workstations, all firewalls deactivated, so why don't my credentials work?
Any help greatly appreciated!
Thanks!
MiS
[navy]"We had to turn off that service to comply with the CDA Bill."[/navy]
- The Bastard Operator From Hell