Error 452: Unable to Connect to the Remote Machine

Version 7

    Symptoms

     

    • Cannot scan a remote machine with Protect
    • Scanning a remote machine in Protect fails with the following error: 
    • Error 452: Unable to connect to the remote machine
     

          Error452.JPG       

              You can see the error code listed in a scan result under the 'Machines Not Scanned' tab as well. 

     

     

    Cause

     

    This issue occurs if one or more scanning prerequisites are not met, usually due to a configuration issue. Generally, 452 indicates that the provided credential is invalid for accessing the remote system or does not have permissions for some component of the remote system.


    Resolution

     

    To resolve this issue:

    • Review and ensure you are meeting the Agentless Patch Scanning Prerequisites.
    • Reboot the Protect console machine.
    • Verify if the Server and Remote Registry services are enabled on the remote machine and that you can remotely log in to this machine.
      • To test the remote registry connection:
      • Click Start > Run, type regedit, and click OK. The Registry Editor window opens.
      • Click File > Connect Network Registry.
    • Ensure that the Workstation service is running on the machine performing the scan.
    • Check if there is already a connection between the server and scanned device and that this connection is using a different set of credentials than the Protect patch server. In this case,the Protect patch server cannot establish the connection. If the target machine being scanned is already connected to the scanning server via a drive mapping, the scan fails
    • Try scanning the target machine using both IP and Name.
    • Test the admin share using this command:

     

    net use \\machine_name\IPC$ /user:domain\ username password
       

     

    Note: Provide the actual name of the machine you are trying to scan, along with the same credentials that you are attempting to scan with. You can substitute machine_name with domain if you are using local credentials.

    Related: Unable to Scan Computer Because Account is Disabled

     

    • Check the Local Area Connection properties on the target machine to ensure that File and Printer sharing is enabled.
    • Try lowering your thread count for simultaneous machines scanned in the scan template to see if this eliminates the error. To do this, navigate to Scan template > General tab.

     

     

    Additional Information

     

    The patch below has been known to be the root cause of some error 452 failures:

    MS15-027 (KB3002657) May Cause Patch Scans To Fail With Error 452

     

    The following document may also prove helpful:

    Scan Error 451 or 452 When Scanning A Machine Located In A Workgroup

     

    Microsoft provides a patch to resolve this issue in a specific scenario.

    To verify if this is applicable, open a command prompt and run these commands:sc.exe \\Target_Computer_Name query
    sc.exe
    \\Target_IP_Address query
    If sc.exe using Target_Computer_Name works, but sc.exe using Target_IP_Ad does not work, you must apply these patches: In the console machine:

    • For Windows Server 2008, 2008 R2 and 7, apply either SP1 or the patch described in the Microsoft Knowledge Base article 2194664.
    • For Windows Server 2003 and 2003 R2, apply the patches described in the Microsoft Knowledge Base articles 975467 and 968389.

    In the target machine:

    • For Windows Server 2008, 2008 R2 and 7, there are no available patches and this issue is not seen to occur in these target operating systems.
    • For Windows Server 2003 and 2003 R2, apply the patches described in the Microsoft Knowledge Base articles 975467 and 968389.

     

    There is also a Local Security Policy called "Admin Approval Mode for the Built-in Administrator Account." Having this enabled can cause access to the admin share to be denied,

    even when the local admin credentials are correct.

    This policy is outlined here: User Account Control: Run all administrators in Admin Approval Mode

     

    Please note: Disabling this policy on Windows 8.1 machines will also disable the Windows Store. Attempting to launch the Windows Store application will prompt you to enable the policy.

    Screenshot_38.png

    Affected Product(s)

     

    Shavlik Protect, All Versions