Installing automation folder or DAgent from GSS on Windows 10 (1703) may be interrupted by GPO

Products

• Ghost Solution Suite

Issue/Introduction

Communication to and from the agent may at times use the Admin$ and C$ shares over Server Message Block (SMB) Protocol and can be locked down by GPO.

Computer Configuration\Windows Settings\Security Settings\Local Policies\Security Options\Microsoft network server: Server SPN target name validation level to on

By default the above GPO is off.

• Unable to install Automation folder.
• Unable to copy file to destination.
• Failure copying unattend.xml
• Failure to install agent on some clients.

Environment

Ghost Solution Suite
Windows 10 (1703)

Cause

Microsoft network server: Server SPN target name validation level is set to ON in a GPO

Resolution

Setting this GPO to:

Computer Configuration\Windows Settings\Security Settings\Local Policies\Security Options\Microsoft network server: Server SPN target name validation level to OFF

Resolves this issue for Ghost DAgent communication.