Communication to and from the agent may at times use the Admin$ and C$ shares over Server Message Block (SMB) Protocol and can be locked down by GPO.

Computer Configuration\Windows Settings\Security Settings\Local Policies\Security Options\Microsoft network server: Server SPN target name validation level to on

By default the above GPO is off.

• Unable to install Automation folder.
• Unable to copy file to destination.
• Failed to copy unattended.xml
• Failed to install agent on some clients.

Microsoft network server: Server SPN target name validation level is set to ON in the GPO

Setting this GPO to:

Computer Configuration\Windows Settings\Security Settings\Local Policies\Security Options\Microsoft network server: Server SPN target name validation level to OFF

Resolves the issue for Ghost agent communication.