Package Server log error: FinalConstruct failed. Failed to create Package Server registry keys. Access is denied

Products

• IT Management Suite

Issue/Introduction

When the package server agent tries to load the following sequence of events occurs and is entered, within the same thread, into the agent logs:

 

Process: AeXNSAgent.exe (8960)

Thread: 10252

Module: AeXNSAgent.exe

Source: Agent

Description:

  Loading client object: Altiris.AeXNSCPkgSvr

******************

Process: AeXNSAgent.exe (8960)

Thread: 10252

Module: AeXNSCPackageServer.dll

Source: Package Server Agent

Description:

  CAeXNSCPkgSvr::FinalConstruct failed. Failed to create Package Server registry keys. Access is denied..

******************

Process: AeXNSAgent.exe (8960)

Thread: 10252

Module: AeXNSAgent.exe

Source: Agent

Description:

  Object 'Altiris.AeXNSCPkgSvr' is not installed: Class not registered (0x80040154). This situation should be resolved once the agent rollout has been completed

 

Environment

ITMS 8.x

Cause

The package server agent (PSA) needs to establish entries within “HKLM\Software\Altiris\Altiris Agent\Package Server” and was prevented from doing so because the SYSTEM account did not inherit ‘Full Control’ permissions from the folder/keys above it.

 The reason this occurred could have been user interference, a GPO, or another security program.

 

Resolution

While logged into the Package Server machine as an administrative account, run REGEDIT and browse to “HKLM\Software\Altiris\Altiris Agent\Package Server”

Right-click on the "Package Server" key and select "Permissions", then, manually grant the SYSTEM account full control permissions to the folder.