SCCM Client Push Installation Issue Access Denied for SMS Admin Account

Question

Hi ALL,

I have a weird SCCM  client push installation issue.
on few machines, client setup fail to copy and shows below error.
ERROR: Unable to access target machine for request: “2097163520”, machine name: “xxxxxx”, access denied or invalid network path.
Certificate is fine, smsAdmin is also part of local admin group, DNS records are correct. File and printer sharing is also enabled. i can also access the hostnameadmin$ from SCCM primary server.
the catch is, if i add Primary server hostname in Local admin group of target machine, then client setup files gets copied smoothly. it only fails when it tries to connect using SMS admin account.
as MS recommendation, SMS admins AD group (which contains SMS Admin account) is part of local admin group and it is not a domain admin.
I have also tried adding SMS  admin account to local admin group on target machines but no luck.
Posted by Akhilesh Sharma in HTMD FB Group
config - HTMD Forum - Welcome to the world of Device Management! This is community build by Device Management Admins for Device Management Admins❤️ Ask your questions!! We are here to help you! - SCCM Client Push Installation Issue Access Denied for SMS Admin Account
in progress 0
admin 2024-07-15T19:34:48+05:30 2 Answers 52 views Beginner
0

Answers ( 2 )

  2. Sunitha P.S
    0
    2024-07-15T19:41:28+05:30
    Reply

    Replied by Abhishek Yadav

    Try to disable firewall on one of the clients and test installation.

    Replied by Andre Williams

    Have you checked the client push account has access

  4. Sunitha P.S
    0
    2024-07-15T19:39:32+05:30
    Reply

    For More details List of Issues Fixed with SCCM 2403 KB26186448
    https://www.anoopcnair.com/list-of-issues-fixed-with-sccm-2403-kb26186448/

    Replied by Akhilesh Sharma

    Hi Andre Williams, it is a standard account and do not have domain admin permission as recommend by MS. we are just adding the SMS admin account to Local admin group on all machines via GPO. also ran edge as different user and supplied SMS admin credentials and it was working fine. so i guess there is no problem with this account. PWD set as not expire

    Replied by Andre Williams

    Akhilesh Sharma I would login using the client purchase and see if you have access to admin$ ,Client Push Account should have administrator access Or the SCCM site server should be part of the Administrators group , this should be logged in ccm.log .

    Replied by Akhilesh Sharma

    Andre Williams thanks Andre for the tip, I will surely verify if client push acc has admin$ access.

Leave an answer

Sorry, you do not have permission to answer to this question .