There are several reasons why an attempt to log on can fail. If you are denied access to a computer:
- Verify that the computer you trying to log on to allows the type of access you are attempting. For example, most users cannot log on locally on computers that are Active Directory domain controllers. Similarly, a computer’s properties must be configured to allow remote access for you to be able to connect remotely. These settings are Windows policies and properties and are not related to the Centrify agent for Windows.
- Check whether you are attempting to log on using a local account or a domain account. The administrator can assign a role that allows you to log on to your local account, your domain account, or both. It is possible that only one of those accounts has been assigned a role with access to the computer. For example, your administrator may have your account configured so you can log on using your local account credentials but not with your domain credentials.
- Verify that the computer where you are trying to log on has access to an Active Directory domain controller. If an Active Directory domain controller is not available or the local computer is not a member of an Active Directory domain, you might be prevented from logging on because the agent cannot verify you have authority to access the computer.
- Determine whether you are attempting to log on to a remote computer with an appropriate role. The administrator can assign a role that allows you to log on locally, log on remotely, or both. It is possible that only one of those rights has been configured for the role you have been assigned. For example, your administrator may have configured the role you are assigned to allow you to log on to your local computer but not allow remote connections.
After the Centrify Agent for Windows has been installed, you must have a role assigned to your account that gives you log on privileges. If an attempt to log on fails, contact your Active Directory administrator or helpdesk to determine the roles you have been assigned, the type of access your roles grant, and any limitations associated with your role assignment. For example, roles can have time constraints with specific periods of availability. If you attempt to log on, but the role is not available, you will be denied access.
For more information about the steps you can take, see Troubleshooting.