OS installations end with: CANet: error 1312

book

Article ID: 145140

calendar_today

Updated On:

Products

CA Client Automation - Asset Management CA Client Automation - IT Client Manager CA Client Automation CA Client Automation - Software Delivery CA Client Automation - Remote Control CA Client Automation - Asset Intelligence CA Client Automation - Desktop Migration Manager CA Client Automation - Patch Manager

Issue/Introduction

After upgrade the Scalability Server to Windows 2019 and apply security baseline, OS deployments via OSIM fail with error "CANet: error 1312"

Cause

Windows 2019 has a more strict security baseline that removes canonprv from "Access this computer from the network" as it overrides current settings.

Environment

Release : 1403

Component : DESKTOP AND SERVER MANAGEMENT

Resolution

Security Baselines for Windows Server 2019 are very strict.

The recommended values for Local Policies/User Rights Assignement:

Access this computer from the network are BUILTIN\Administrators, BUILTIN\Remote Desktop Users
Deny access to this computer from network are BUILTIN\Guests, NT AUTHORITY\Local account

Need to add canonprv back to "Access this computer from the network" and remove local account from "Deny access to this computer from network"