|
Home > Archive > BizTalk Server > September 2006 > Access is Denied error
You are viewing an archived Text-only version of the thread.
To view this thread in it's original format and/or if you want to reply to
this thread please [click here]
| Author |
Access is Denied error
|
|
|
| Hi,
I am getting the following error message when I try to view the property of
sent ports that I already created. Also the Receive ports showing the defualt
settings when I try to view the receive ports that I already created.
Error message : Could not retrieve transport type data for Primary Transport
of Send port "port name" from config store. Access is denied.
When I restar the ENTSSO, I am getting the following warning message:
1. The SSO service is running under a local administrator account. This is
not recommended for security reasons. See documentation for details.
SSO service account: <my user account >
2.
Failed to retrieve master secrets. Verify that the master secret server name
is correct and that it is available.
Secret Server Name: <My machine name>
Error Code: 0x80070005, Access is denied.
I loged under the domin user name, not local mechine.
I am getting this issue after I install the Win XP Service Pack 2. I am not
sure this may cause this problem.
Could any one help me to fix this please.
--
Thank you,
Siva
| |
|
| I solved this issue. If any one have same issue follow the link to solve it.
http://support.microsoft.com/kb/841893/
They are 2 ways to solve this issue.
1. Modify Group policy for the RPC Endpoint Mapper Client Autedication to
Enabled
2. Modify Registry.
I used the first one and it works fine now.
I have another issue now. I am getting the following warning message in
Event Viewer
The SSO service is running under a local administrator account. This is not
recommended for security reasons. See documentation for details.
SSO service account:
and also BizTalk is not starting itself after I reboot the service.
SSO is logon under my user account, not in local addmin. BizTalk set to
automatic start. Why do I still get these problem?
Can any one help me to fix these issues?
--
Thank you,
Siva
"Siva" wrote:
> Hi,
> I am getting the following error message when I try to view the property of
> sent ports that I already created. Also the Receive ports showing the defualt
> settings when I try to view the receive ports that I already created.
>
> Error message : Could not retrieve transport type data for Primary Transport
> of Send port "port name" from config store. Access is denied.
>
> When I restar the ENTSSO, I am getting the following warning message:
> 1. The SSO service is running under a local administrator account. This is
> not recommended for security reasons. See documentation for details.
> SSO service account: <my user account >
>
> 2.
> Failed to retrieve master secrets. Verify that the master secret server name
> is correct and that it is available.
> Secret Server Name: <My machine name>
> Error Code: 0x80070005, Access is denied.
>
> I loged under the domin user name, not local mechine.
> I am getting this issue after I install the Win XP Service Pack 2. I am not
> sure this may cause this problem.
>
> Could any one help me to fix this please.
> --
> Thank you,
>
> Siva
>
| |
| Steve Jamieson [MSFT] 2006-09-27, 7:30 pm |
| Hello Siva -
The event log message from ENTSSO -
"The SSO service is running under a local administrator account. This is
not
recommended for security reasons. See documentation for details."
This is telling you that the service account that you have configured for
ENTSSO is a local administrator on your computer. It does not mean it is
*the* Administrator account, it means that this account (which, from what
you say is your account?) is a member of the local Administrators group,
and hence it this account has administrator privileges on your computer.
It is only a warning, it will not affect the behavior of ENTSSO or BizTalk.
However, it is a good idea for security reasons (potential elevation of
privilege) to run the ENTSSO service under an account which is not in your
local Administrators group.
However: if you change the ENTSSO service account you need to first backup
the master secret, then change the service account, then restore the master
secret. I would just leave it for now until you get everything working and
then attempt this later.
I am not sure why your BizTalk service is not starting. The BizTalk service
does depend on the ENTSSO service.
Best thing to do is stop both BizTalk and ENTSSO, clear your Application
event log, then start ENTSSO, then take a look in the event log to make
sure it started OK, then start BizTalk. If there are any ENTSSO errors
please let me know.
--------------------[vbcol=seagreen]
it.[vbcol=seagreen]
not[vbcol=seagreen]
property of[vbcol=seagreen]
defualt[vbcol=seagreen]
Transport[vbcol=seagreen]
is[vbcol=seagreen]
name[vbcol=seagreen]
not[vbcol=seagreen]
This posting is provided "AS IS" with no warranties, and confers no rights.
EBusiness Server Team
|
|
|
|
|