VMware View Composer, error...

[b4ndit]

Hi,

While testing VMware View Composer, I've found some error while composing desktop.

The environment that we used are:

ESXi 5.0 U1

vCenter 5.0 U1 (windows 2008 R2, External Database, SQL Standard) + with Composer installed (external Database, SQL Standard) (exe: VMware-viewcomposer-2.7.0-481620.exe)

VMware View 5.0 U1 (windows 2008 R2) (exe: VMware-viewconnectionserver-x86_64-5.0.1-640055.exe). Event log also using SQL Standard.

Desktop that used for Composer Base Image : WinXP SP2 (pacthed to SP3). View Agent Exe: VMware-viewagent-5.0.1-640055.exe

When using dedicated desktop, we are sucessfully using it. But,when using VMware View COmposer, an error arise.

Here is the screen shot and the log file.

The use that registered by the composer domain is already equal to domain admin (I am using xxxx.net\vmware account)

Is the View 5.0 U1 has bugs ? I haven't tried the VMware View 5.0 in this environment.

Need your help/advice..

Thanks....

Domain Name: SviWebService.exe, Thread Identity: , Windows Identity: NT AUTHORITY\SYSTEM, OS Version: Microsoft Windows NT 6.1.7600.0, Reason: UnauthorizedAccess, AdConfigId: 98cfd507-7a1b-41db-8226-8b163c2f86f1, ContainerDN: CN=Computers, ComputerAccountName: xxxxx-3, Fqdn: yyyyy.net, UserName: vmware

2012-04-17 17:35:05,656 | WFE thread 10 | FATAL | ServiceCore.Action.AddToAdDomainAction - Error: fail to execute AddToAdDomainAction,guest:xxxxx-2, AD config Id:98cfd507-7a1b-41db-8226-8b163c2f86f1. AD FQDN: yyyyy.net

VMware.Sim.CommonLib.Exception.SimAdsException: Access is denied.

---> System.UnauthorizedAccessException: Access is denied.

[admin]

There is an error present in the logs that indicates that the credential being used does not have permission for adding an AD account.  View documentation lists the required permissions for a user to create computer accounts against a given container.

Please check and adjust the permission for the user ID being used.

Gary

2012-04-17 17:35:05,609 | WFE thread 6  | FATAL | ServiceCore.Action.AddToAdDomainAction - Error: fail to execute AddToAdDomainAction,guest:xxxxx-1, AD config Id:98cfd507-7a1b-41db-8226-8b163c2f86f1. AD FQDN: yyyyy.net
VMware.Sim.CommonLib.Exception.SimAdsException: Access is denied.
---> System.UnauthorizedAccessException: Access is denied.

   at System.DirectoryServices.Interop.UnsafeNativeMethods.IAds.SetInfo()
   at System.DirectoryServices.DirectoryEntry.CommitChanges()
   at VMware.Sim.ServiceCore.ActiveDirectory.AdUtil.TryAddAccount(DirectoryEntry containerEntry, String name, String fqdn, String description, DirectoryEntry& newMember)
   at VMware.Sim.ServiceCore.ActiveDirectory.AdUtil.<>c__DisplayClass8.<AddAccount>b__4()
   at VMware.Sim.ServiceCore.ActiveDirectory.AdUtil.RunWithRetry(AdOperationDelegate operation, ExceptionHandlingDelegate exHandling)
   --- End of inner exception stack trace ---
   at VMware.Sim.ServiceCore.ActiveDirectory.AdUtil.ProcessAdException(Exception ex, AdConfigEntryDo adConfigDo, String containerDn, String computerAccountName, Int32 numOfRetries)
   at VMware.Sim.ServiceCore.ActiveDirectory.AdUtil.<>c__DisplayClass8.<AddAccount>b__5(Exception ex, Int32 numOfRetries)
   at VMware.Sim.ServiceCore.ActiveDirectory.AdUtil.RunWithRetry(AdOperationDelegate operation, ExceptionHandlingDelegate exHandling)
   at VMware.Sim.ServiceCore.ActiveDirectory.AdUtil.AddAccount(AdConfigEntryDo adConfigDo, String containerDn, String name, String password, String description)
   at VMware.Sim.ServiceCore.Action.AddToAdDomainAction.Execute(ActionInParam actionParams), Machine Name: VCENTER50U1, Timestamp: 4/17/2012 10:35:05 AM, App Domain Name: SviWebService.exe, Thread Identity: , Windows Identity: NT AUTHORITY\SYSTEM, OS Version: Microsoft Windows NT 6.1.7600.0, Reason: UnauthorizedAccess, AdConfigId: 98cfd507-7a1b-41db-8226-8b163c2f86f1, ContainerDN: CN=Computers, ComputerAccountName: xxxxx-1, Fqdn: yyyyy.net, UserName: vmware

[royberk]

Agreed with GSturdi.

This error points to a credential error when trying to join the domain. See VMWare documentation for setting up a proper account to authenticate in AD.

[b4ndit]

Hi,

But the user that I've used (xxxxxx.net\vmware) can perform join domain action.

However, I'll check again and post the result in here.

[b4ndit]

Thanks guys..

Solved!!