Error: "You have insufficient rights to access this application." when trying to open the console

Article:TECH86549  |  Created: 2007-01-13  |  Updated: 2014-05-14  |  Article URL http://www.symantec.com/docs/TECH86549
Article Type
Technical Solution


Issue



When you try to open the console for Symantec Mail Security for Microsoft Exchange (SMSMSE) you get the error "You have insufficient rights to access this application."

Symptoms
 

 

You might find the following event in the event log:
Event ID: 0
Source: Symantec Mail Security

Description:
You have insufficient rights to access this application. Please use an account that has read/write permissions to the application folder.

Source: Symantec.Cmaf.UI.Controllers.UIController::.ctor Thread: 1
.ctor at offset 213 in file:line:column <filename unknown>:0:0

 

You may also get the following error message:

You either have insufficient permissions to access this application or your user credentials are not refreshed. Try logging off and logging in again to reload the user credentials. 


Cause



There are various causes of this issue.  See below for possible causes and solutions. 


Solution



Check for proper permissions to the console folders 

See the following article for details: Error: "You either have insufficient permissions to access this application or your user credentials are not refreshed." when attempting to open the Symantec Mail Security for Microsoft Exchange (SMSMSE) when CMAF permissions not set correctly.

Check for proper permissions to the registry

  1. Open the registry editor (Start -> Run, regedit)
  2. Navigate to HKEY_LOCAL_MACHINE\Software\Symantec\SMSMSE\<version>\, on 64 bit systems, HKEY_LOCAL_MACHINE\Software\Wow6432Node\Symantec\SMSMSE\<version>\
  3. Right click the <version number> key and select Permissions...
  4. Click Add...
  5. Type in "SMSMSE Admins" in the box, and click Ok
  6. Verify the SMSMSE Admins group has full control to the key, if not, add it manually and click Apply and then OK
  7. Exit the registry editor

     

Change DCOM permissions on Windows 2003 or Windows 2008 NOTE: Any changes made to DCOM permissions will require a reboot of the server to take effect.
 

  1. On the Windows taskbar, click Start > Run.
  2. In the Open box, type the following text: dcomcnfg
  3. Press Enter.
  4. In the left pane, expand Component Services > Computers.
  5. Right-click My Computer > Properties.
  6. Click Default Properties.
  7. For Default Impersonation Level, click Identify.


Change DCOM permission  on Windows 2000

  1. On the Windows taskbar, click Start > Run.
  2. In the Open box, type the following text:

    dcomcnfg

  3. Press Enter
  4. Click Default Properties.
  5. For Default Impersonation Level, click Identify.


Check that all security identifiers are enumerated

See the following article for details: Error: "You either have insufficient permissions to access this application or your user credentials are not refreshed." when attempting to open the Symantec Mail Security for Microsoft Exchange console.

Set up the SMSMSE console to run as administrator (Windows Vista, 7 or Server 2008)

User Access Contrtol, enabled by default in Windows Vista, 7 and Server 2008 will block attempts to access or modify the registry, which is necessary for the SMSMSE console to function properly. To allow the console access to the registry, complete the following steps.

1. Right click the SMSMSE console and choose Run as Administrator.
2. If the console opens correctly, exit the console, right click the console icon and choose Properties.
3. Click the Open File Location button.
4. Right click the file Symantec.Cmaf.UI.exe and click Properties.
5. On the Compatibility tab check Run this program as an administrator.
6. Click Ok


Supplemental Materials

SourceETrack
Value2411436

SourceETrack
Value1992244


Legacy ID



2007450906604598


Article URL http://www.symantec.com/docs/TECH86549


Terms of use for this information are found in Legal Notices