VMware Horizon Community
mahanthesh
Contributor
Contributor

Trouble adding Windows10v1903 into Horizon desktop pool

Hi Team,

After adding the Windows10 machine, publish failed with below error and noticed number of machines shows '0' in summary

Fault type is AD_FAULT_FATAL - com.vmware.daas.cloneprep.ldap.LdapException: createComputerAccount:

Fail to create computer account it1582869343, entryDn: CN=it1582869343,CN=Computers,DC=xxxxxxxxxxxx,DC=xx,

description: Internal Template account. Can be deleted if vm cp-template-c8017d11-e782-4966-a09f-fe91f3a5335d does not exist in the VC. -

Insufficient Access rights: unable to create entry, resultCode=50 (insufficient access rights),

errorMessage=00000522: SecErr: DSID-0315331F, problem 4003 (INSUFF_ACCESS_RIGHTS), data 0

Please help on this.

Regards,

Mahanthesh

Reply
0 Kudos
3 Replies
DaDeRailer
Contributor
Contributor

We are having the exact same issue.

Any help would be greatly appreciated.

Thanks,

Derrell

Reply
0 Kudos
Keith09
Contributor
Contributor

Did you every get a reply to this question?

Reply
0 Kudos
Shreyskar
VMware Employee
VMware Employee

Hi

Not sure if you are hitting the same issue and logs are matching. In case you are facing same issue check below:

Fail to create computer account it1582869343

Insufficient Access rights: unable to create entry, resultCode=50 (insufficient access rights),

> Log clearly shows error 4003 (insufficient access rights) which means horizon service account doesn't have permission to create/add computer accounts in AD OU as defined while creating instant clone pool.

Error: problem 4003 (INSUFF_ACCESS_RIGHTS) | Microsoft Docs

> Please check the horizon service account has correct permission to create/add machine accounts in AD OU:

Create a User Account for Instant-Clone Operations

Reply
0 Kudos