topic Re: PAN OS integrated Use ID agent Server monitoring Status Showing "Access Denied" in Next-Generation Firewall Discussions

PAN OS integrated Use ID agent Server monitoring Status Showing "Access Denied"

RoneyRajan123 — Thu, 27 Feb 2025 04:28:10 GMT

Hi Team

Pan OS Integrated User ID is connected with one of our DC server with out having any issues while configuring in the other DC servers we are getting the "ACCESS Denied" in the server monitoring.

While seeing in the

>less mp-log useridd.log

I have seen in he following error:

tail follow yes mp-log useridd.log

2025-02-20 14:12:41.329 +0300 Error: pan_user_id_winrm_query(pan_user_id_win.c:2805): Connection failed. response code = 500, error: (null) in vsys 1, server=qdhqad03_Userid.

2025-02-20 14:12:42.272 +0300 Error: pan_user_id_winrm_query(pan_user_id_win.c:2761): failed to connect to winrm server qdhqad01_Userid in vsys 1

2025-02-20 14:12:42.272 +0300 Error: pan_user_id_winrm_error(pan_user_id_win.c:2654): HTTP 500: s:Receiverw:InternalErrorThe WS-Management service cannot process the request.

The WMI service returned an 'access denied' error. 200 The WS-Management service cannot process the request.

The WMI service returned an 'access denied' error. HRESULT 0x8033810400182150859012HRESULTThe WS-Management service cannot process the request.

The WMI service returned an 'access denied' error.

Re: PAN OS integrated Use ID agent Server monitoring Status Showing "Access Denied"

RoneyRajan123 — Thu, 27 Feb 2025 04:30:07 GMT

I have already followed below docs and there is no any changes

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA14u000000sb51CAA&lang=en_US%E2%80%A9

Re: PAN OS integrated Use ID agent Server monitoring Status Showing "Access Denied"

T.Johnston — Thu, 10 Jul 2025 19:46:21 GMT

Did you ever get a resolution to this? I'm running into the exact same issue, down to the letter and number.

Re: PAN OS integrated Use ID agent Server monitoring Status Showing "Access Denied"

TomYoung — Fri, 11 Jul 2025 00:56:36 GMT

Hi @T.Johnston and @RoneyRajan123 ,

Ever since I ran into this issue https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA14u000000wkkfCAA years ago, I switched to the Windows-based User-ID agent. The install and configuration is (in my opinion) much easier than the integrated agent now. Both require a dedicated service account; so, you have to touch the server anyway.

Thanks,

Tom

Re: PAN OS integrated Use ID agent Server monitoring Status Showing "Access Denied"

T.Johnston — Fri, 11 Jul 2025 14:44:05 GMT

Hi Tom, thank you for your feedback. I'll bring this up to my teammates as a possible alternative.

What's interesting in our case is that we can get the integrated agent to work with one of our Domain Controllers but not the other. My teammates have confirmed the configurations match so we're not sure why we're running into the issue.We'll keep pressing on, hopefully something turns around.

Re: PAN OS integrated Use ID agent Server monitoring Status Showing "Access Denied"

Gerry_Fahy — Fri, 21 Nov 2025 09:26:33 GMT

I have the same issue - did anyone find a solution (apart from adding the account to the Domain Admins group - that works but is not allowed as a solution...)