Endpoint Protection

Scenerio: No users were able to authenticate to the SEPM Console (v: 11.0.6200.754) remotely. The error given was "Authentication Failure. Please try again". I was able to log in locally to the console on the server, and checked all accounts to make sure they weren't locked. None of the accounts were locked.

Resolution: The problem was discovered in Admin>Servers>ServerName>Directory Servers tab. We only had one domain controller listed and it was recently decommisioned, hence our problem. Added all the active DCs. I also had to go through each individual admin account and point them to a DC that was in service. I scattered the accounts out so we all don't get locked out the next time this happens.

Hopefully SEPM 12 will allow us to just authenticate to the domain instead of specific controllers.

Hi,

Since you having Directory authentication please use Domain name while adding a directory server instead of DC/ADC's hostname or IP address.

If we use host name / IP address it will search for that host name / IP  and if the particular server is offline you may get this error.

Regards

Ajin

Hello, May be the reason is different because when i used the 11.x version, i have only added one of the ADC from active and that was working fine

As AjinBabu mentioned, it's perfectly possible to enter your domain name into the Server hostname/IP Address field of the directory servers dialog window (this is menioned in the help section for it as well, see screenie).

Something else you can do, is to add your other DCs into the Replication Server tab to act as failover points of authentication in the event the primary auth server is down/decommissioned.

Hi

Please repair the SEPM

Regards

 

Hi,

Any Updates on the same.

Regards

Ajin