Comstore cannot be changed locally using ccnfcmda command

Products

• CA Client Automation - IT Client Manager
• CA Client Automation

Issue/Introduction

Many technical documents lists solutions that include changing the comstore using the command:

ccnfcmda -cmd SetParameterValue -ps ..

When this is attempted, the following error is returned:

SetParameterValue: CCNF_ACCESS_DENIED

This happens regardless of administration rights, even local administrator is prompted with the same error.

Environment

Client Automation 14.x

Resolution

This typically occurs if the actual Configuration Policy (applied to the computer that the ccnfcmda command is attempted on) specifies that the parameter to modify (listed behind the -pn keyword) is set to Centrally Managed rather than locally managed.

Parameters that are centrally managed cannot be changed using the ccnfcmda command.

To deal with this, there are 2 options:

1. Change the parameter directly in Configuration Policy and apply it to the workstation/server of  your choice.
2. Change the parameter to "locally managed", apply the policy to the desired machine, after which it will be possible to change the parameter using the ccnfcmda command.