Logging on to Notification Server generates an error message

Products

• IT Management Suite

Issue/Introduction

When logging on to a Notification Server console (via a Web browser, terminal service, or direct connection), an error message is generated that indicates there is a server error in the Altiris Application. A sample of the code displayed is below:

Server Error in /Altiris/NS Application.

Configuration Error
Description: An error occurred during the processing of a configuration file required to service this request. Please review the specific error details below and modify your configuration file appropriately.

Parser Error Message: Error reading the password from the registry.

Source Error:

Line 57: -->
Line 58: <authentication mode="Windows" />
Line 59: <identity impersonate="true" userName="registry:HKLM\Software\Altiris\eXpress\Notification Server\AppIdentity,user" password="registry:HKLM\Software\Altiris\eXpress\Notification Server\AppIdentity,pwd" />
Line 60: <authorization>
Line 61: <deny users="?" />

Source File: D:\Program Files\Altiris\Notification Server\web.config Line: 59

What can be done to fix this error?

Resolution

Approach 1:
The Altiris Application ID was locked out or misconfigured. One possible solution is:
 1. Run a repair of Notification Server from Add or Remove Programs.
 2. Once complete this will bring up the mini-setup (called NSSetup) window to perform a post configuration. This Web page is http://localhost/Altiris/NS/Install/NSSetup.aspx.
 3. Once the setup process was completed, and a correctly configured account is added for the application ID, open the Altiris Console. It should be functional.

Approach 2:
 1. Open web.config file (under ..\Program Files\Altiris\Notification Server) and find the following line:
<identity impersonate="true" userName="registry:HKLM\Software\Altiris\eXpress\Notification Server\AppIdentity,user" password="registry:HKLM\Software\Altiris\eXpress\Notification Server\AppIdentity,pwd" />
 2. Delete the entries for userName and password. As well change the 'identity impersonate' from "true" to "false". Now the line should look like this:
<identity impersonate="false" />
 3. Then run NSSetup (http://localhost/Altiris/NS/Install/NSSetup.aspx). Now the Altiris Console should open properly.

Note:  Whenever  you run a repair and/or run NSSSETUP and, you are not at the Notification Server, you must remote in as session 0.

 start>run  Mstsc.exe /v:<NSServerName> /console to connect to the NS

It is also recommended to use the Application Identity Account.