Access Denied with both Run as privileged user and Credential Provider

  • 7023936
  • 12-Jun-2019
  • 12-Jun-2019

Environment

Privileged Account Manager

Situation

Access Denied error appears when attempting to Run as privileged user and launch a Credential Provider rdp session.

Resolution

While there may be many reasons for Command Control (cmdctrl) to deny any particular authorization request, please verify that the Run Host is either set to Submit Host or configured to match the Agent Name found in the Hosts Console. The Run Host configured in the cmdctrl rule must match the Agent Name for authorization to be approved.

Cause

Agent Name and Run Host mismatch.