How To Fix 80070005 access is denied SCOM 2019

This is one of the most frustrating errors that an IT person can face. You are about to undergo an installation process for a new agent on one of your servers only to be told that you cannot complete configuration because of this error NT authority system access is denied. It can be really hard to figure out exactly what happened during installation and why registration failed. Here, are some tips on troubleshooting the failure of the operations manager server database opening service control manager on

This article will teach you how to troubleshoot the Operations Manager Server failed to open service control manager on computer SERVERNAME. If this error happens, the server cannot complete configuration of agent on the computer. The error code is 80070005.

Read more: How to Fix Windows 10 KB4508451 Update Problems

Check and install manually if discovery wizard fails

Install account: NT AUTHORITY\SYSTEM Error Code: 80070005 Error Description: Access is denied.

Install account: NT AUTHORITY\SYSTEM Error Code

NT AUTHORITYTY\SYSTEM doesn't have enough permission to install agent on server. so we have to install it manually using MOMAgent.msi on client use account administrator domain, we can get it from the link on SCOM 2019 as follows

%ProgramFiles%\Microsoft System Center 2016\Operations Manager\Server\AgentManagement<platform>

The installation process takes place and we enter the information as shown below

microsoft monitoring agent

Next step two

type info agent scom 2019

Continue we choose domain or computer account and we enter admin account information, type Next. select I don't want to use windows update and type install

we go we go back to SCOM 2019, we should set it up so that SCOM can automatically approve the new manually installed agent by go to Administrator -> Security -> Properties

setting atuomaitcally approve

Go to Pending mamangement select VM and click approve.

If an error occurs and cannot be monitored, open service on client and find Microsoft monitoring agent select restart, we can repair the agent on the client and try again

repair agent

Check privileges hslockdown.exe

Another so we can check, On computers requiring high security, for example a domain controller, you may need to deny certain identities access to rules, tasks, and monitors that might jeopardize the security of your server. The Health Service lockdown tool (HSLockdown.exe) enables you to use various command-line options to control and limit the identities used to run a rule, task, or monitor. access here

we open cmd with administrator rights and browse to the folder containing HSLOCKDOWN.exe and follow the image below

hslockdown.exe permission

You can see it has been blocked NT Authority\SYSTEM is denied. use below command line to remove it and once done we restart the SCOM server to take effect

HSLockdown.exe /A “NT AUTHORITY\SYSTEM”

allow NT AUTHORITY\SYSTEM