Video Screencast Help
Symantec to Separate Into Two Focused, Industry-Leading Technology Companies. Learn more.

Cannot create Windows PE unless domain admin

Created: 28 Jan 2013 | 6 comments

I have symantec ghost 2.5 on a Windows Server 2008 with a user called "test" (this is just an example) that is not part of the domain admin group in our Active Directory. I added this user to the local administrator group on the server. When he/she tries to create a windows PE he/she is getting an error that  "The ISO could not be created. Please verify that the destination path is writable." It then gives a "blank" message pop-up, then quits. When I try this exact same procedure with a domain admin I am able to create a Windows PE without issue. The destination is an iso image that is on the desktop and I have the non-domain admin account part of the local admin group on the server. There is plenty of space on the disk as well and the Symantec Ghost software is fully updated. I attached a few screen shots to show what is happening as well.

I am trying to get our techs access to this server so they can perform these tasks without having to add them to the domain admin group. Could someone help me with this.

Discussion Filed Under:

Comments 6 CommentsJump to latest comment

EdT's picture

You need to be a local or domain admin to create a WinPE image. Consequently, you will need to provide a suitable account to your technicians, or provide them with a standalone virtual machine which has a local admin account and no network connectivity, if you have an anal security department.

If your issue has been solved, please use the "Mark as Solution" link on the most relevant thread.

altoid's picture

I stated above that I put that user in the local administrator group on the server. That user is local admin on the server but it is stating he doesn't have permissions to write to disk for creating a windows PE. As shown in the "1-3.jpg" files. It is only when I add the user to the domain admin group or try a domain admin user that it works. It doesn't make any sense if the user is already local admin for the server. Why would it need to be in a domain admin group?

EdT's picture

I tend to use standalone machines for creating WinPE images, where I am local admin, and that works without issue. When you say that you are creating an image "to the desktop", is your user profile local or redirected to the network? Since the desktop is considered part of the user profile, if your profiles are redirected to server shares, then it is going to create the ISO on a server share. 

Try saving to a local folder rather than the desktop and make sure that none of the WinPE sources are network based.

If your issue has been solved, please use the "Mark as Solution" link on the most relevant thread.

altoid's picture

I save it to the local desktop of the current logged on user that is admin on the server. No images are being saved anywhere except locally on the same server that the software is installed on. 

EdT's picture

Realistically, the best way forward at this point is to use Procmon from Sysinternal's page at Microsoft to monitor the operation of the WinPE generating wizard and see which action(s) return an "Access Denied" message.

If your issue has been solved, please use the "Mark as Solution" link on the most relevant thread.

ICHCB's picture

I agree with Ed,   sounds like a permissions issue.   

As a side note you can install the ghost standard tools on your "test" users desk top computer so that they can make boot disks.   The only issue I can see is that if you update drivers you will need to do so on each console so that if you do console tasks and boot disk tasks you will both be using the same set of drivers but this is minor.   I like haveing the ghost standard tools on my laptop so if I need to updated and make a new flash drive I have the tools with me out in the field rather than haveing to go to a centeral server.

If you find this post helpful please give it a thumbs up!
If you find that this solves your problem please mark it as the solution!