Description:
Using SCMR12.1 hexecp command line to run certain processes on a remote SCM agent machine, on Win2008 specifically, user observes Access Denied error.
This happens although the User (-usr) specified belongs to the Administrator group and the same user could run the same process if logged into the remoteagent machine physically.
Moreover, if the hexecp command uses "-usr Administrator" parameter then the command can be executed successfully.
Solution:
The problem is resolved by disabling window security policy: "Admin approval Mode for the Built in Administrator Enabled" and running the SCM multi user agent as "local system account".