Unable to install ADAudit Plus agent due to permission restrictions

Unable to install ADAudit Plus agent due to permission restrictions

In this article:  

  • Issue description

  • Prerequisites

  • Possible causes

  • Resolution

  • Related topics and articles

  • How to reach support

Issue description  

ADAudit Plus requires specific administrative privileges on the target machine to successfully deploy the agent. When these permissions are missing or restricted, the agent installation whether automatic or manual may fail with various errors. This article explains the common permission related causes behind these installation failures and helps you identify what must be in place for a successful deployment.

Prerequisites  

Before installing or deploying the ADAudit Plus agent, ensure the following requirements are met:

  • The service account used for deployment has local administrator privileges on the target machine.

  • The account can access the admin$ share (\<server_name>\admin$) on the target machine.

  • The target machine is reachable over the network (no connectivity or DNS issues).

  • No other installation, update, or Windows Installer process is already running on the target system.

  • The agent installer files are accessible and not blocked by antivirus or endpoint protection software.

Possible causes  

The following errors may occur when the service account does not have sufficient permissions:

  • Access to the admin$ share is denied: The service account cannot access \<server_name>\admin$.

  • Network path was not found: The client machine is unreachable due to DNS issues or missing permissions.

  • The system cannot find the file specified (0x2): Required installation files cannot be accessed or copied due to permission restrictions.

  • Fatal error occurred (0x643): A generic installation failure typically caused by insufficient privileges or blocked installer components.

 

 Resolution   

Access to the admin$ share is denied

  1. Providing the Admin Share access: To access the admin share on the ADAudit Plus server from the target machine using the service account configured in ADAudit Plus, follow these steps:

  • Log in to the target machine using the ADAudit Plus service account, or use Run as different user to launch File Explorer or Command Prompt with those credentials.

  • Open Run (press Windows + R) or open File Explorer.

  • In the address bar, type \\<ADAudit_Plus_Server_Name>\admin$ and press Enter.
    Example: \\adauditserver\admin$

  • If you're prompted for credentials, enter the ADAudit Plus service account username and password in the format:

  1. Increasing Admin$ user limit

  • Navigate to Shared Folders Microsoft Management Console (MMC) snap-in > Shares > ADMIN$ > Properties, and set an appropriate value for the User limit.

  1. Configure user account in Domain Settings page in ADAudit Plus

  • Log in to the ADAudit Plus web console.

  • Go to Domain Settings from the Admin section.

  • Hover over the relevant domain and click Modify Credentials.

  • Enter the domain user account credentials and click Save.

  • Click the Start icon on the ADAudit Plus server and select Services.

  1. Configure user account in ADAudit Plus service.

  • In the Services window, locate ManageEngine ADAudit Plus.

  • Right-click it and select Properties.

  • Go to the Log On tab.

  • Select This account and enter the same domain user account credentials used in Domain Settings.

  • Click Apply and then OK.

  • Restart the ManageEngine ADAudit Plus service for the changes to take effect.

Network path was not found

The error “Network path was not found” occurs when the ADAudit Plus service account does not have the required permissions to access the admin share (\<server_name>\admin$) on the target machine.

  1. Log in using the same service account and verify whether you can access the admin share on the target computer (\<server_name>\admin$).

  2. If access fails, follow the documentation to create a user account that has adequate rights to perform the agent installation.

  3. After granting the appropriate permissions, make sure to update the user credentials in:

    • ADAudit Plus UI > Domain Settings > Modify Credentials and

    • Windows Services > ManageEngine ADAudit Plus Service > Log On tab,
      using an account that has administrative rights and can successfully access the admin share on the target machine.

The system cannot find the file specified (0x2)  

The error typically appears when the ADAudit Plus service account does not have sufficient permissions to access the admin share or write files to the target machine.

  1. Verify whether the ADAudit Plus service account can access the admin share on the target computer (\<server_name>\admin$).

  2. If access is denied, please refer to the documentation for creating an account that has the necessary privileges to perform the agent installation.

  3. After granting the appropriate permissions, make sure to update the user credentials in:

    • ADAudit Plus UI > Domain Settings > Modify Credentials, and

    • Windows Services > ManageEngine ADAudit Plus Service > Log On tab,
      using an account that has administrative rights and can successfully access the admin share on the target machine.

  1. Once the correct account credentials are updated, retry the agent installation.

Fatal error occurred (0x643)  

The error usually indicates that the agent installer could not complete due to missing prerequisites or insufficient permissions on the target machine.

  1. On the target computer, verify the following requirements:

    • .NET Framework 4.5 or higher is installed.

    • ADAudit Plus is not already installed on the machine.

  1. Confirm whether the ADAudit Plus service account can access the admin share on the target system (\<server_name>\admin$).

  2. If access is denied, please refer to the documentation for creating an account that has the necessary privileges to perform the agent installation.

  3. After granting the appropriate permissions, make sure to update the user credentials in:

    • ADAudit Plus > Domain Settings > Modify Credentials, and

    • Windows Services > ManageEngine ADAudit Plus Service > Log On tab,
      using an account that has the necessary permissions to access the admin share and write files to the SYSTEMDRIVE\Windows directory on the target machine.

  1. After updating the credentials and confirming prerequisites, retry the agent installation.

Related topics  

How to reach support  

If the issue persists, contact our support team here

                  New to ADSelfService Plus?

                    • Related Articles

                    • Unable to deploy ADAudit Plus agent because of firewall limitations

                      In this article: Issue description Prerequisites Possible causes Resolution Related topics and articles How to reach support Issue description ADAudit Plus uses lightweight agents on endpoints to collect event logs and monitor user activity. If the ...
                    • Installing the ADAudit Plus agent via UI

                      In this article: Objective Prerequisites Steps to follow Validation and confirmation Tips Related topics and articles Objective ADAudit Plus requires an agent installed on target machines to collect logs and monitor activity efficiently. This guide ...
                    • Unable to upgrade ADAudit Plus

                      In this article: Issue description Possible causes Prerequisites Resolution Related topics and articles How to reach support Issue description ManageEngine ADAudit Plus may occasionally encounter issues during the upgrade process, resulting in error ...
                    • Error: Unable to get Domain DNS/FLAT names & security package-specific errors in ManageEngine ADAudit Plus

                      In this article: Issue description Prerequisites Possible causes Resolution How to reach support Related topics and articles Issue description These errors occur in ManageEngine ADAudit Plus when attempting to add a Domain or Domain Controller. The ...
                    • How to increase ADAudit Plus Agent EventData directory folder size

                      In this article: Objective Prerequisites Steps to follow Validation and confirmation Tips Related topics and articles Objective This article explains how to increase the size limit of the EventData directory in GB when the agent is unable to forward ...