none
Problems validating credentials of an untrusted forest RRS feed

  • Question

  • Hello everybody !!

    Hope I can have my question clarified today.

    I'm running into a problem when I want to collect data from a machine in another forest.

    Here is my scenario :

    2 forests with no trust relationship ;

    there is no forward or stub zone to the "foreign" forest in my DNS server in the forest where my MAP server is running on ;

    there is a register wich points to the DC of the target forest in the hosts file in my MAP server ;

    I can ping the DC of the target forest from my MAP server ;

    I can telnet , from the MAP server to the DC in another forest on ports : 135,139,445 ;

    I also checked the service for registry remote on the target forest DC and its started. I've already restarted the service and hasn't changed anything;

    I can even inventory data without errors but when it comes to metrics , I get an error saying something like : "cannot connect to the domain , try another domain  It's not exactly like this , sorry , but I just can't remember right now and I have no access to the MAP server right now".

    I collected the log file and I'll paste it here .

     

    Hope you guys can help me .

     

    Thanks in advance.

     

    Here is the log file :

     

     

    <2011-09-13 11:49:25.63 WorkerThread1@WmiClassesCollectionStep,E> CollectRegistryEnumKeyValue(Device(GUID={04fe9390-3e51-45ca-8b07-4e9453e3ce80},DnsHostName='SF002800'), <RegistryClass Namespace='HKEY_CURRENT_USER' ClassName='Software\Microsoft\Windows\CurrentVersion\Uninstall\*'>): ErrorCode: AccessDenied Exception: System.Management.ManagementException: Access denied 

       |   at System.Management.ManagementException.ThrowWithExtendedInfo(ManagementStatus errorCode)

       |   at System.Management.ManagementObject.InvokeMethod(String methodName, ManagementBaseObject inParameters, InvokeMethodOptions options)

       |   at Microsoft.AssessmentPlatform.InventoryEngine.DeviceInventory.WmiClassesCollectionStep.CollectRegistryEnumKeyValue(WmiCollectionState stateRec, CollectorClassCollectionState cccs, CollectorClass cc, String subKeyName, String enumType, ManagementClass managementClass)

       |Location of error report:

       |   at Microsoft.AssessmentPlatform.InventoryEngine.DeviceInventory.WmiClassesCollectionStep.CollectRegistryEnumKeyValue(WmiCollectionState stateRec, CollectorClassCollectionState cccs, CollectorClass cc, String subKeyName, String enumType, ManagementClass managementClass)

       |

    <2011-09-13 11:49:31.21 TID-1595@WatchdogThreadPool,I> UpdateMaxThreadsWatermark() - currentCpuUtil = 12, error = 78, accumulatedCpuUtilError = 0, adjustment = 10.4, countOfThreadsToAdd = 11, maxThreadsWatermark = 12, numThreads = 2, PrivateMemorySize = 180662272, TotalManagedMemory = 22616552

    <2011-09-13 11:49:41.21 TID-1595@WatchdogThreadPool,I> UpdateMaxThreadsWatermark() - currentCpuUtil = 20, error = 70, accumulatedCpuUtilError = 0, adjustment = 9.33333333333333, countOfThreadsToAdd = 10, maxThreadsWatermark = 12, numThreads = 2, PrivateMemorySize = 173850624, TotalManagedMemory = 23305480

     

     

    <2011-09-13 11:49:43.95 WorkerThread1@WmiClassesCollectionStep,E> CollectRegistryEnumKeyValue(Device(GUID={04fe9390-3e51-45ca-8b07-4e9453e3ce80},DnsHostName='SF002800'), <RegistryClass Namespace='HKEY_CURRENT_USER' ClassName='Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\*'>): ErrorCode: AccessDenied Exception: System.Management.ManagementException: Access denied 

       |   at System.Management.ManagementException.ThrowWithExtendedInfo(ManagementStatus errorCode)

       |   at System.Management.ManagementObject.InvokeMethod(String methodName, ManagementBaseObject inParameters, InvokeMethodOptions options)

       |   at Microsoft.AssessmentPlatform.InventoryEngine.DeviceInventory.WmiClassesCollectionStep.CollectRegistryEnumKeyValue(WmiCollectionState stateRec, CollectorClassCollectionState cccs, CollectorClass cc, String subKeyName, String enumType, ManagementClass managementClass)

       |Location of error report:

       |   at Microsoft.AssessmentPlatform.InventoryEngine.DeviceInventory.WmiClassesCollectionStep.CollectRegistryEnumKeyValue(WmiCollectionState stateRec, CollectorClassCollectionState cccs, CollectorClass cc, String subKeyName, String enumType, ManagementClass managementClass)

       |

    <2011-09-13 11:49:45.37 WorkerThread1@DeviceInventoryWorkItem,I> InventoryWorkCallback(Device(GUID={04fe9390-3e51-45ca-8b07-4e9453e3ce80},DnsHostName='SF002800')) - Device inventory completed. Elapsed time = 00:00:42.906. Collection results: Wmi = Success/41/0/46, Registry = Success/15/0/50.

    <2011-09-13 11:49:45.37 WorkerThread1@InventoryWorkItem,I> WorkCallback() - Completed InventoryWorkItem with description='DeviceInventoryWorkItem(GUID={04fe9390-3e51-45ca-8b07-4e9453e3ce80},DnsHostName='SF002800')'. Elapsed time: 00:00:43.013

    <2011-09-13 11:49:45.38 WorkerThread0@InventoryDiscoveryWorkItem,I> InventoryDiscoveryWorkItem().InventoryWorkCallback() - Discovering devices in the current inventory data.

    <2011-09-13 11:49:45.55 WorkerThread0@InventoryWorkItem,I> WorkCallback() - Completed InventoryWorkItem with description='InventoryDiscoveryWorkItem()'. Elapsed time: 00:00:00.171

    <2011-09-13 11:49:51.23 TID-1595@WatchdogThreadPool,I> UpdateMaxThreadsWatermark() - currentCpuUtil = 9, error = 81, accumulatedCpuUtilError = 0, adjustment = 10.8, countOfThreadsToAdd = 11, maxThreadsWatermark = 12, numThreads = 2, PrivateMemorySize = 175202304, TotalManagedMemory = 23953952

    <2011-09-13 11:50:01.25 TID-1595@WatchdogThreadPool,I> UpdateMaxThreadsWatermark() - currentCpuUtil = 3, error = 87, accumulatedCpuUtilError = 0, adjustment = 11.6, countOfThreadsToAdd = 12, maxThreadsWatermark = 12, numThreads = 2, PrivateMemorySize = 173666304, TotalManagedMemory = 24600392

    <2011-09-13 11:50:11.25 TID-1595@WatchdogThreadPool,I> UpdateMaxThreadsWatermark() - currentCpuUtil = 3, error = 87, accumulatedCpuUtilError = 0, adjustment = 11.6, countOfThreadsToAdd = 12, maxThreadsWatermark = 12, numThreads = 2, PrivateMemorySize = 173985792, TotalManagedMemory = 25265816

     



    • Edited by Souza,Valmir Tuesday, September 13, 2011 9:34 PM
    Tuesday, September 13, 2011 9:33 PM

Answers

  • The performance data collection in MAP uses the Remote Registry service. You can test connectivity from the MAP machine to each target machine by using Regedit and going to File>Connect Network Registry.  If you can’t connect to the target machine from there, then MAP can’t either.

     

    Can you put your database on a VM that has MAP installed and run the VM on the other domain? That might help overcome the trust issue.


    Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.
    Wednesday, September 14, 2011 1:50 AM
    Moderator