After upgrade the Scalability Server to Windows 2019 and apply security baseline, OS deployments via OSIM fail with error "CANet: error 1312"
Environment
Release : 1403
Component : DESKTOP AND SERVER MANAGEMENT
Cause
Windows 2019 has a more strict security baseline that removes canonprv from "Access this computer from the network" as it overrides current settings.
Resolution
Security Baselines for Windows Server 2019 are very strict.
The recommended values for Local Policies/User Rights Assignement:
Access this computer from the network are BUILTIN\Administrators, BUILTIN\Remote Desktop Users Deny access to this computer from network are BUILTIN\Guests, NT AUTHORITY\Local account
Need to add canonprv back to "Access this computer from the network" and remove local account from "Deny access to this computer from network"