I posted last month about an issue with the Active Directory Management Gateway Service (ADMGS) on Windows Server 2008. The ADMGS (which runs as the Active Directory Web Services, ADWS, service) allows you to use the Active Directory module for Windows PowerShell to manage AD remotely in domains where there are no Server 2008 R2 domain controllers running.
I saw the following error messages when running the “import-module activedirectory” command in PowerShell.
The server was unable to process the request due to an internal error. For more information about the error, either turn on IncludeExceptionDetailInFaults (either from ServiceBehaviorAttribute or from the <serviceDebug> configuration behavior) on the server in order to send the exception information back to the client, or turn on tracing as per the Microsoft .NET Framework 3.0 SDK documentation and inspect the server trace logs.
I was able to diagnose the ultimate cause based on my previous post but still was receiving errors even after mucking with NTFS directory permissions for temporary .NET files. I finally had the idea to check on anti-virus software to see if that was blocking the communication. Wallah! The domain controller had anti-virus software installed (in this case it was McAfee) and as soon as I adjusted the AV software configuration the AD connection was allowed. The log entries below help pinpoint the cause.
1/19/2012 5:22:05 PM Blocked by Access Protection rule NT AUTHORITY\SYSTEM C:\Windows\ADWS\Microsoft.ActiveDirectory.WebServices.exe C:\Windows\TEMP\t0sggpq5.dll Common Maximum Protection:Prevent creation of new executable files in the Windows folder Action blocked : Create
1/19/2012 5:22:07 PM Would be blocked by Access Protection rule (rule is currently not enforced) NT_DOMAIN\SRS-RMRES2-02$ System:Remote C:\Windows\SYSVOL\domain\Policies\{1C9122E4-78CD-4001-A2E7-8BBCA348C893}\GPT.INI Anti-virus Outbreak Control:Block read and write access to all shares Action blocked : Read
So make sure to check your AV software if you have this kind of problem…it just might be the key to a solution!
0 Responses to “Active Directory Management Gateway Service (ADMGS) Errors and McAfee Anti-Virus Software”