Access Denied

' Access Denied' is one of the possible network status codes that can be returend for a machine after running a machine audit or a network scan. You may see this error message if ENT NetCenter does not have sufficient permissions to access the DCOM service on the remote machine or if it does not have access to certain parts of the WMI repository on the remote machine.

The following PDF document contains a list of things to check on both the machine from which you are conducting audits and the machine which you are trying to audit:
      Verifying WMI Security

If you continue to have access denied problems after having verified all of the settings in the above document, and rebooted both machines, here are a few more things to check:

1. You supplied an incorrect username or password in the credentials for the network.
    
2. The username that you supplied in the credentials for the network is for a user that does not have access to the WMI service on the machine(s) that you are trying to audit. For example, it could be that you have supplied the name of a local user (e.g. "administrator") rather than that of a domain user (such as "yourdomain\administrator"), even though the domain administrator has access to the WMI service, or it could simply be that the username that you provided is for a user that doesn’t have sufficient privilleges.
    
3. Perhaps you specified an Authority in the credentials for the network that the machine is connected to, where you should not have (or the authority is not specified correctly). Typically you shouldn’t need to specify anything in the Authority field.
   
4. Check that DCOM is enabled on both the machine running ENT NetCenter/Monitor and the machine that you are trying to audit. In the registry HKLM\Software\Microsoft\OLE the value EnableDCOM should be set to 'Y'. Note that you may have to restart the computer (or at least the DCOM service) after changing this setting.
   
5. On a Windows XP computers, make sure that remote logons are not being forced into the security context of the GUEST account (aka "ForceGuest", which is enabled by default for computers that are not attached to a domain). To do this (on the machine that you are trying to audit):
   • Select 'Start | Run' and type 'secpol.msc' in the Run dialog
   • Expand the 'Local Policies' node and select 'Security Options'.
   • If the setting 'Network access: Sharing and security model for local accounts' is set to 'Guest only', change it to 'Classic' and restart the computer.
     
6. Make sure that all remote access and WMI-related services are enabled and running. On XP, the following services should be running or allowed to start on demand:

COM+ Event System
Remote Access Auto Connection Manager
Remote Access Connection Manager
Remote Procedure Call (RPC)
Remote Procedure Call (RPC) Locator
Remote Registry
Server
Windows Management Instrumentation
Windows Management Instrumentation Driver Extensions
WMI Performance Adapter
Workstation

You can find more information on how to specify network credentials in the helpfiles for ENT NetCenter.