Error 1067 while attempting to start the Altiris Service

Products

• IT Management Suite

Issue/Introduction

After running aexconfig.exe /svcid user:Domain\username password:password the Altiris service would not start.  Error 1067 kept coming up on the attempt to start the Altiris service.  In the log files the following errors were being written:

Process: AeXSvc (4268)
Thread ID: 5
Module: aexsvc.exe
Source: Altiris.NS.Configuration.Core.SetIntValue
Description: Failed to set coresetting

( Exception Details: Altiris.NS.Utilities.ImpersonationException: Could not logon as user "Domain\User". Current user is "Domain\User". Token=0, LastError=1326 (Logon failure: unknown user name or bad password).
   at Altiris.NS.Utilities.Impersonate.ImpersonateUser(String domain, String user, String password, Boolean forceLogon)
   at Altiris.NS.Utilities.Impersonate.ImpersonateAsSvc()
   at Altiris.NS.Utilities.ImpersonatedRegistryWatcher.OnImpersonate()
   at Altiris.Common.RegistryWatcher.SetRegistryKeyToMonitor(String name)
   at Altiris.Common.RegistryWatcher..ctor(String name, Boolean impersonateUser)
   at Altiris.NS.Configuration.ConfigurationSettings..ctor(String customSettingsFilePath)
   at Altiris.NS.Configuration.Core.get_Settings()
   at Altiris.NS.Configuration.Core.SetIntValue(String keyName, Int32 value) )
( Exception logged from:
   at Altiris.Diagnostics.Logging.EventLog.ReportException(Int32 severity, String strMessage, String category, Exception exception)
   at Altiris.Diagnostics.Logging.EventLog.ReportException(String strMessage, String category, Exception exception)
   at Altiris.NS.Logging.EventLog.ReportException(String strMessage, Exception exception)
   at Altiris.NS.Configuration.Core.SetIntValue(String keyName, Int32 value)
   at Altiris.NS.Configuration.Core.GetIntValue(String keyName, Int32 minValue, Int32 defaultValue)
   at Altiris.NS.Configuration.Core.get_ResxCacheSize()
   at Altiris.NS.Utilities.AltirisResourceManager..cctor()
   at Altiris.NS.Utilities.AltirisResourceManager.GetResourceManager()
   at Altiris.NS.TaskManagement.TaskManagerService..ctor()
   at System.Runtime.Remoting.Messaging.StackBuilderSink._PrivateProcessMessage(IntPtr md, Object[] args, Object server, Int32 methodPtr, Boolean fExecuteInContext, Object[]& outArgs)
   at System.Runtime.Remoting.Messaging.StackBuilderSink.PrivateProcessMessage(RuntimeMethodHandle md, Object[] args, Object server, Int32 methodPtr, Boolean fExecuteInContext, Object[]& outArgs)
   at System.Runtime.Remoting.Messaging.StackBuilderSink.SyncProcessMessage(IMessage msg, Int32 methodPtr, Boolean fExecuteInContext)
   at System.Runtime.Remoting.Messaging.StackBuilderSink.SyncProcessMessage(IMessage msg)
   at System.Runtime.Remoting.Activation.ActivationServices.ActivateWithMessage(Type serverType, IMessage msg, ServerIdentity srvIdToBind, Exception& e)
   at System.Runtime.Remoting.Activation.ActivationServices.DoServerContextActivation(IConstructionCallMessage reqMsg)
   at System.Runtime.Remoting.Activation.ConstructionLevelActivator.Activate(IConstructionCallMessage ctorMsg)
   at System.Runtime.Remoting.Activation.ActivationServices.Activate(RemotingProxy remProxy, IConstructionCallMessage ctorMsg)
   at System.Runtime.Remoting.Proxies.RemotingProxy.InternalActivate(IConstructionCallMessage ctorMsg)
   at System.Runtime.Remoting.Proxies.RemotingProxy.Invoke(IMessage reqMsg)
   at System.Runtime.Remoting.Proxies.RealProxy.PrivateInvoke(MessageData& msgData, Int32 type)
   at Altiris.NS.TaskManagement.TaskManagerService..ctor()
   at System.RuntimeTypeHandle.CreateInstance(RuntimeType type, Boolean publicOnly, Boolean noCheck, Boolean& canBeCached, RuntimeMethodHandle& ctor, Boolean& bNeedSecurityCheck)
   at System.RuntimeType.CreateInstanceSlow(Boolean publicOnly, Boolean fillCache)
   at System.RuntimeType.CreateInstanceImpl(Boolean publicOnly, Boolean skipVisibilityChecks, Boolean fillCache)
   at System.Activator.CreateInstance(Type type, Boolean nonPublic)
   at System.Activator.CreateInstance(Type type)
   at Altiris.NS.Hosting.AeXHoster.LoadInstallationConfig(String sConfigFile)
   at Altiris.NS.Hosting.AeXHoster.LoadAllInstallations()
   at Altiris.NS.Hosting.AeXHoster.Start()
   at Altiris.NS.AeXService.OnStart(String[] args)
   at System.ServiceProcess.ServiceBase.ServiceQueuedMainCallback(Object state)
   at System.Threading._ThreadPoolWaitCallback.WaitCallback_Context(Object state)
   at System.Threading.ExecutionContext.Run(ExecutionContext executionContext, ContextCallback callback, Object state)
   at System.Threading._ThreadPoolWaitCallback.PerformWaitCallbackInternal(_ThreadPoolWaitCallback tpWaitCallBack)
   at System.Threading._ThreadPoolWaitCallback.PerformWaitCallback(Object state)
 )
( Extra Details:  Type=Altiris.NS.Utilities.ImpersonationException Src=Altiris.NS )

Process: AeXSvc (2496) Thread ID: 13 Module: AeXSvc.exe Source: Altiris.NS.ServiceMain.CurrentDomain_UnhandledException Description: The AeXSvc process terminated due to an unhandled exception. Details: Altiris.NS.Utilities.ImpersonationException: Could not logon as user "domain\username". Current user is "DOMAIN\username1". Token=0, LastError=1326 (Logon failure: unknown user name or bad password). at Altiris.NS.Utilities.Impersonate.ImpersonateUser(String domain, String user, String password, Boolean forceLogon) at Altiris.NS.Utilities.Impersonate.ImpersonateAsSvc() at Altiris.NS.Utilities.ImpersonatedRegistryWatcher.OnImpersonate() at Altiris.Common.RegistryWatcher.SetRegistryKeyToMonitor(String name) at Altiris.Common.RegistryWatcher..ctor(String name, Boolean impersonateUser) at Altiris.NS.Configuration.ConfigurationSettings..ctor(String customSettingsFilePath) at Altiris.NS.Configuration.Core.get_Settings() at Altiris.NS.ClientMessaging.ClientEvtQueueWatcher.LogEventQueueStatusThreadProc() at System.Threading.ThreadHelper.ThreadStart_Context(Object state) at System.Threading.ExecutionContext.Run(ExecutionContext executionContext, ContextCallback callback, Object state) at System.Threading.ThreadHelper.ThreadStart()

 Error 1067 kept coming up on the attempt to start the Altiris service.

Cause

The AppIdentity registry entries still held the old Appid user information and was possibly corrupt. 

Resolution

Exported the registry folder of "Hkey_Local_Machine\Software\Altiris\eXpress\Notification Server\AppIdentity as a backup. Then delete the folder and ran the aexconfig /svcid command again to recreate the AppIdentity registry information.  This allowed the Altiris service to start with the correct credentials.  Refer to Tech note http://www.symantec.com/business/support/index?page=content&id=HOWTO10009 (Altiris KB 46542) for help on running the AeXConfig utility.

Applies To

Notification Server 7 Sp1