LANDesk 9.0: Remote Console Login Fails with error: 'Invalid Authorization Specification - Invalid Connection String Attribute'

Version 1

    Description

    When logging into a Remote 32bit Console using a Domain account, you getting the following error message:
    'Invalid Authorization Specification - Invalid Connection String Attribute'
    This may still happen even if the user is added into the LANDesk Administrators group. 

    Cause

    This error comes up most often when the account used to log into the computer does not have permissions to access the remote registry on the Core Server.
    If you connect to the Network Registry, It will show up With access to HKEY_LOCAL_MACHINES and HKEY_USERS, but when you select the HKLM you get this error:
    Cannot open HKEY_Local_Machine: error while opening key


    The errors are due to limited "Remote Registry" access caused by permissions on and within the HKEY_LOCAL_MACHINE registry key on the Core Server.  In 8.8 The LANDesk Management Suite Group was given permissions to the following key:
    HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurePipeServers\winreg

     

    Because of how RBA has changed in 9.0, most users are not set into the LANDesk Management Suite group on the Core Server thus causing problems when users try to connect with a Remote 32bit Console.


    Resolution

    Option 1:

    • Add any Domain Group or User that will need Remote 32bit Console access to the LANdesk Management Suite Group on the Core.

     

    Option 2:

      1. Open the Registry on the Core Server using the regedit command.
      2. Verify that "Everyone" has read access permissions to the HKEY_LOCAL_MACHINE registry key.
      3. Verify that "Users" and have access to the following Keys:
        Registry on a 32bit OS:
        HKLM/Software/LANDesk/Management Suite/Core/Connections/Local
        Registry on a 64bit OS:
        HKLM/Software/Wow6432/LANDesk/Management Suite/Core/Connections/Local
      4. Verify that "Domain Users" have access to the following key:
        HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurePipeServers\winreg
      5. Test the Network Registry access to verify that the Remote Console works

     

    The information regarding the 'HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurePipeServers\winreg' key is based on the following MS Knowledge Base Articles:
    http://support.microsoft.com/default.aspx/kb/892192
    http://support.microsoft.com/kb/314837