User ID Agend (access is denied) error after Windows Update

Buck_Smooth — Fri, 24 Feb 2023 21:47:11 GMT

After our Server 2019 DC's were updated our Windows User-ID Agents have been unable to connect with error (access is denied). Rolling back this update fixed the issue. Anyone else experience this recently? KB5022286

Update: Other DC's had to uninstall KB5014692 or KB5022840

As soon as these updates are uninstalled, the Windows User-ID Agent immediately changes to "connected".

Re: User ID Agend (access is denied) error after Windows Update

TomYoung — Fri, 17 Feb 2023 20:42:03 GMT

Hi @Buck_Smooth ,

If you have agentless User-ID, the issue could be the DCOM security change MS put out last year. Do you see the DCOM errors in the Windows system event log? You may be running into this issue -> https://live.paloaltonetworks.com/t5/general-topics/user-identification-and-winrm-on-http/m-p/481674.

Here is (I think) the latest MS KB article -> https://support.microsoft.com/en-us/topic/kb5004442-manage-changes-for-windows-dcom-server-security-.... It says next month you can't do the regex fix. I would encourage you to go to the

Thanks,

Tom

topic User ID Agend (access is denied) error after Windows Update in General Topics

User ID Agend (access is denied) error after Windows Update

Re: User ID Agend (access is denied) error after Windows Update