OS installations end with: CANet: error 1312
Article ID: 145140
Updated On:
Products
CA Client Automation - Asset Management
CA Client Automation - IT Client Manager
CA Client Automation
CA Client Automation - Software Delivery
CA Client Automation - Remote Control
CA Client Automation - Asset Intelligence
CA Client Automation - Desktop Migration Manager
CA Client Automation - Patch Manager
Issue/Introduction
After upgrade the Scalability Server to Windows 2019 and apply security baseline, OS deployments via OSIM fail with error "CANet: error 1312"
Environment
Release : 1403
Component : DESKTOP AND SERVER MANAGEMENT
Cause
Windows 2019 has a more strict security baseline that removes canonprv from "Access this computer from the network" as it overrides current settings.
Resolution
Security Baselines for Windows Server 2019 are very strict.
The recommended values for Local Policies/User Rights Assignement:
Access this computer from the network are BUILTIN\Administrators, BUILTIN\Remote Desktop Users
Deny access to this computer from network are BUILTIN\Guests, NT AUTHORITY\Local account
Need to add canonprv back to "Access this computer from the network" and remove local account from "Deny access to this computer from network"
The recommended values for Local Policies/User Rights Assignement:
Access this computer from the network are BUILTIN\Administrators, BUILTIN\Remote Desktop Users
Deny access to this computer from network are BUILTIN\Guests, NT AUTHORITY\Local account
Need to add canonprv back to "Access this computer from the network" and remove local account from "Deny access to this computer from network"
Feedback
Yes
No
Powered by
