Installing automation folder from the Ghost Solution Suite console on new the Creators Edition of Windows 10 (1703) may be interrupted by GPO

book

Article ID: 169924

calendar_today

Updated On:

Products

Ghost Solution Suite

Issue/Introduction

Communication to and from the agent may at times use the Admin$ and C$ shares over Server Message Block (SMB) Protocol and can be locked down by GPO.

Computer Configuration\Windows Settings\Security Settings\Local Policies\Security Options\Microsoft network server: Server SPN target name validation level to on

By default the above GPO is off.

  • Unable to install Automation folder.
  • Unable to copy file to destination.
  • Failed to copy unattended.xml
  • Failed to install agent on some clients.

Cause

Microsoft network server: Server SPN target name validation level is set to ON in the GPO

 

Environment

  • Creators Edition of Windows 10 (1703) 

Resolution

Setting this GPO to:

Computer Configuration\Windows Settings\Security Settings\Local Policies\Security Options\Microsoft network server: Server SPN target name validation level to OFF

Resolves the issue for Ghost agent communication.