Bug
Unable to use Configure ArcGIS Server Account graphical user interface (GUI) tools to specify a domain account as service account when the following group policy is applied, 'Network access: Restrict clients allowed to make remote calls to Security Account Manager (SAM)'.
| Bug ID Number | BUG-000137422 |
|---|---|
| Submitted | February 11, 2021 |
| Last Modified | June 5, 2024 |
| Applies to | ArcGIS GIS Server |
| Version found | 10.8.1 |
| Operating System | Windows OS |
| Operating System Version | 2016 64 Bit |
| Status | Non-Reproducible |
Additional Information
“The user who runs the utility must have administrative rights on the machine. The domain account specified in the utility is not be the one making the remote call to the SAM; it is the user running the utility that makes that call."Workaround
There are two workarounds, but they might not be feasible in a Security Technical Implementation Guide (STIG) environment:
- Temporarily promote the domain account to an administrator.
- Disable the group policy:
- Navigate to Computer Configuration > Windows Settings > Security Settings > Local Policies > Security Options > Network access: Restrict clients allowed to make remote calls to SAM, or from the registry at HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\RestrictRemoteSAM.
Steps to Reproduce
Bug ID: BUG-000137422
Software:
- ArcGIS GIS Server
Get notified when the status of a bug changes
Discover more on this topic
Search for related information
Find training related to this topic
Explore ideas and give feedback
Get help from ArcGIS experts
Download the Esri Support App