Unable to install ADAudit Plus agent due to permission restrictions

Unable to install ADAudit Plus agent due to permission restrictions

In this article:  

  • Issue description

  • Prerequisites

  • Possible causes

  • Resolution

  • Related topics and articles

  • How to reach support

Issue description  

ADAudit Plus requires specific administrative privileges on the target machine to successfully deploy the agent. When these permissions are missing or restricted, the agent installation whether automatic or manual may fail with various errors. This article explains the common permission related causes behind these installation failures and helps you identify what must be in place for a successful deployment.

Prerequisites  

Before installing or deploying the ADAudit Plus agent, ensure the following requirements are met:

  • The service account used for deployment has local administrator privileges on the target machine.

  • The account can access the admin$ share (\<server_name>\admin$) on the target machine.

  • The target machine is reachable over the network (no connectivity or DNS issues).

  • No other installation, update, or Windows Installer process is already running on the target system.

  • The agent installer files are accessible and not blocked by antivirus or endpoint protection software.

Possible causes  

The following errors may occur when the service account does not have sufficient permissions:

  • Access to the admin$ share is denied: The service account cannot access \<server_name>\admin$.

  • Network path was not found: The client machine is unreachable due to DNS issues or missing permissions.

  • The system cannot find the file specified (0x2): Required installation files cannot be accessed or copied due to permission restrictions.

  • Fatal error occurred (0x643): A generic installation failure typically caused by insufficient privileges or blocked installer components.

  • Initiating connection to remote service failed: This issue occurs when ADAudit Plus is unable to establish the required remote service connection on the target machine due to connectivity problems, missing services, or insufficient permissions.

  • Logon failure: The target account name is incorrect

 

 

 Resolution   

Access to the admin$ share is denied

  1. Providing the Admin Share access: To access the admin share on the ADAudit Plus server from the target machine using the service account configured in ADAudit Plus, follow these steps:

  • Log in to the target machine using the ADAudit Plus service account, or use Run as different user to launch File Explorer or Command Prompt with those credentials.

  • Open Run (press Windows + R) or open File Explorer.

  • In the address bar, type \\<ADAudit_Plus_Server_Name>\admin$ and press Enter.
    Example: \\adauditserver\admin$

  • If you're prompted for credentials, enter the ADAudit Plus service account username and password in the format:

  1. Increasing Admin$ user limit

  • Navigate to Shared Folders Microsoft Management Console (MMC) snap-in > Shares > ADMIN$ > Properties, and set an appropriate value for the User limit.

  1. Configure user account in Domain Settings page in ADAudit Plus

  • Log in to the ADAudit Plus web console.

  • Go to Domain Settings from the Admin section.

  • Hover over the relevant domain and click Modify Credentials.

  • Enter the domain user account credentials and click Save.

  • Click the Start icon on the ADAudit Plus server and select Services.

  1. Configure user account in ADAudit Plus service.

  • In the Services window, locate ManageEngine ADAudit Plus.

  • Right-click it and select Properties.

  • Go to the Log On tab.

  • Select This account and enter the same domain user account credentials used in Domain Settings.

  • Click Apply and then OK.

  • Restart the ManageEngine ADAudit Plus service for the changes to take effect.

Network path was not found

The error “Network path was not found” occurs when the ADAudit Plus service account does not have the required permissions to access the admin share (\<server_name>\admin$) on the target machine.

  1. Log in using the same service account and verify whether you can access the admin share on the target computer (\<server_name>\admin$).

  2. If access fails, follow the documentation to create a user account that has adequate rights to perform the agent installation.

  3. After granting the appropriate permissions, make sure to update the user credentials in:

    • ADAudit Plus UI > Domain Settings > Modify Credentials and

    • Windows Services > ManageEngine ADAudit Plus Service > Log On tab,
      using an account that has administrative rights and can successfully access the admin share on the target machine.

The system cannot find the file specified (0x2)  

The error typically appears when the ADAudit Plus service account does not have sufficient permissions to access the admin share or write files to the target machine.

  1. Verify whether the ADAudit Plus service account can access the admin share on the target computer (\<server_name>\admin$).

  2. If access is denied, please refer to the documentation for creating an account that has the necessary privileges to perform the agent installation.

  3. After granting the appropriate permissions, make sure to update the user credentials in:

    • ADAudit Plus UI > Domain Settings > Modify Credentials, and

    • Windows Services > ManageEngine ADAudit Plus Service > Log On tab,
      using an account that has administrative rights and can successfully access the admin share on the target machine.

  1. Once the correct account credentials are updated, retry the agent installation.

Fatal error occurred (0x643)  

The error usually indicates that the agent installer could not complete due to missing prerequisites or insufficient permissions on the target machine.

  1. On the target computer, verify the following requirements:

    • .NET Framework 4.5 or higher is installed.

    • ADAudit Plus is not already installed on the machine.

  1. Confirm whether the ADAudit Plus service account can access the admin share on the target system (\<server_name>\admin$).

  2. If access is denied, please refer to the documentation for creating an account that has the necessary privileges to perform the agent installation.

  3. After granting the appropriate permissions, make sure to update the user credentials in:

    • ADAudit Plus > Domain Settings > Modify Credentials, and

    • Windows Services > ManageEngine ADAudit Plus Service > Log On tab,
      using an account that has the necessary permissions to access the admin share and write files to the SYSTEMDRIVE\Windows directory on the target machine.

  1. After updating the credentials and confirming prerequisites, retry the agent installation.

Initiating connection to remote service failed

  1. Verify connectivity by pinging the target machine from the ADAudit Plus server.
    If the ping fails, resolve the underlying network issue before proceeding.

  2. If the target machine responds to ping, confirm that the Remote Registry service is running on the target system.

  3. Then verify that the service account used by ADAudit Plus can access the admin share (\server_name\admin$) on the target computer.

  4. If access is denied, update the credentials in Domain Settings (ADAudit Plus console) and in the Log On tab of the ADAudit Plus service with an account that has permissions to create a service on the target machine.

 

Logon failure: The target account name is incorrect

  • This error typically appears if the ADAudit Plus service account is locked, disabled, or its password has been modified.

  • To resolve this, first verify whether the service account can access the admin share on the target machine. If access fails, update the account credentials in the Domain Settings within the ADAudit Plus console and in the Log On tab of the ADAudit Plus service to ensure a valid account with the correct permissions is being used.

 

Logon failure: Unknown username or bad password

  • Verify that the service account’s username and password are accurate and up to date.

  • Next, test whether the service account can access the admin share on the target machine. If access is denied, update the credentials in the Domain Settings within the ADAudit Plus console and in the Log On tab of the ADAudit Plus service to ensure a valid account with the correct permissions is being used.

 

Could not start remote service

  • This issue occurs when the service account running ADAAudit Plus lacks sufficient privileges to start services on the target machine.

  • First, verify whether the service account can access the admin share on the target system. If it cannot, update the credentials in the Domain Settings within the ADAudit Plus console and the Log On tab of the ADAudit Plus service to use an account preferably one with Domain Admin rights that has the required permissions to start services on the target computer.

Related topics  

How to reach support  

If the issue persists, contact our support team here

                  New to ADSelfService Plus?

                    • Related Articles

                    • Troubleshooting agent installation errors in ADAudit Plus

                      In this article: Issue description Prerequisites Possible causes Resolution Related topics and articles How to reach support Issue description While deploying the ADAudit Plus agent either automatically or manually you may encounter errors that ...
                    • Unable to deploy ADAudit Plus agent because of firewall limitations

                      In this article: Issue description Prerequisites Possible causes Resolution Related topics and articles How to reach support Issue description ADAudit Plus uses lightweight agents on endpoints to collect event logs and monitor user activity. If the ...
                    • Unable to upgrade ADAudit Plus

                      Issue description ManageEngine ADAudit Plus may occasionally encounter issues during the upgrade process, resulting in error messages or unexpected interruptions. These problems can hinder users from accessing new features and critical security ...
                    • How to increase ADAudit Plus Agent EventData directory folder size

                      Objective This article explains how to increase the size limit of the EventData directory in GB when the agent is unable to forward data to server in ManageEngine ADAudit Plus, which temporarily stores processed audit events. Adjusting this size ...
                    • Unable to configure EMC Isilon in ADAudit Plus

                      In this article: Issue description Prerequisites Possible causes Resolution Related topics and articles How to reach support Issue description ADAudit Plus is unable to add the EMC Isilon cluster, preventing file activity monitoring and auditing. ...