Home Remote Support (Formerly Control Center)

Permission problems with the Remote Manage pane

We are currently trying the True Control Center portal (3.0.6) and we are having some issues with the Remove Manage pane. It works great when the browser is running under the same service account as the app pool and the portal services but it won't open for any other accounts (Full SCCM admins).

When we are attempting to open the pane, nothing happens. In the developper console we get the following error:
GET http://v41eusmgmt08/platform/api/Cireson_ConfigurationManager_Portal_Core_Models_ConfigurationManager_CmResource?$filter=ResourceId eq 16781780&$select=Id 403 (Forbidden)

If we browse to this api URL, we get the following result:
{
  "error":{
    "code":"","message":"Authorization has been denied for this request."
  }
}

The following error is also logged in the platform log:
Main Exception 2018-04-13T07:36:00.8746826-04:00: HResult: -2147467261, Source: Cireson.ConfigurationManager.Portal.Core, Message: Object reference not set to an instance of an object., InnerException: ,  StackTrace    at Cireson.ConfigurationManager.Portal.Core.PortalAuthentication.PortalAuthenticationHandler.<GetUserFromCookie>d__4.MoveNext() in D:\a\1\s\CMP.Core\CMP.Core\PortalAuthentication\PortalAuthenticationHandler.cs:line 96, TargetSite: Void MoveNext()

Using the service account, it works from the portal server and from any remote computer and all the Remote Manage actions works (except for Log Folder and Open C$ Share).

Best Answer

Answers

Sign In or Register to comment.