Installing automation folder from the Ghost Solution Suite console on new the Creators Edition of Windows 10 (1703) may be interrupted by GPO

Products

• Ghost Solution Suite

Issue/Introduction

Communication to and from the agent may at times use the Admin$ and C$ shares over Server Message Block (SMB) Protocol and can be locked down by GPO.

Computer Configuration\Windows Settings\Security Settings\Local Policies\Security Options\Microsoft network server: Server SPN target name validation level to on

By default the above GPO is off.

• Unable to install Automation folder.
• Unable to copy file to destination.
• Failed to copy unattended.xml
• Failed to install agent on some clients.

Cause

Microsoft network server: Server SPN target name validation level is set to ON in the GPO

 

Environment

• Creators Edition of Windows 10 (1703) 

Resolution

Setting this GPO to:

Computer Configuration\Windows Settings\Security Settings\Local Policies\Security Options\Microsoft network server: Server SPN target name validation level to OFF

Resolves the issue for Ghost agent communication.