This article will teach you how to troubleshoot the Operations Manager Server failed to open service control manager on computer SERVERNAME. If this error happens, the server cannot complete configuration of agent on the computer. The error code is 80070005.
Read more: How to Fix Windows 10 KB4508451 Update Problems
Check and install manually if discovery wizard fails
Install account: NT AUTHORITY\SYSTEM Error Code: 80070005 Error Description: Access is denied.

NT AUTHORITYTY\SYSTEM doesn't have enough permission to install agent on server. so we have to install it manually using MOMAgent.msi on client use account administrator domain, we can get it from the link on SCOM 2019 as follows
%ProgramFiles%\Microsoft System Center 2016\Operations Manager\Server\AgentManagement<platform>
The installation process takes place and we enter the information as shown below

Next step two

Continue we choose domain or computer account and we enter admin account information, type Next. select I don't want to use windows update and type install
we go we go back to SCOM 2019, we should set it up so that SCOM can automatically approve the new manually installed agent by go to Administrator -> Security -> Properties

Go to Pending mamangement select VM and click approve.
If an error occurs and cannot be monitored, open service on client and find Microsoft monitoring agent select restart, we can repair the agent on the client and try again

Check privileges hslockdown.exe
Another so we can check, On computers requiring high security, for example a domain controller, you may need to deny certain identities access to rules, tasks, and monitors that might jeopardize the security of your server. The Health Service lockdown tool (HSLockdown.exe) enables you to use various command-line options to control and limit the identities used to run a rule, task, or monitor. access here
we open cmd with administrator rights and browse to the folder containing HSLOCKDOWN.exe and follow the image below

You can see it has been blocked NT Authority\SYSTEM is denied. use below command line to remove it and once done we restart the SCOM server to take effect
HSLockdown.exe /A “NT AUTHORITY\SYSTEM”

Comments
Post a Comment