Full Admin but Permission Denied

[Stephan Schnider]

Hi

 

I've got a an issue with permission for a particular user. The AD user was add and assigned in Studio as Full Admin.

 

But when login to the Studio on the DDC, he gets the following error:

1. Unable to find a Delivery Controller

2.

Error Id: XDDS:292F2E2C

Exception:
    Citrix.Console.Models.Exceptions.ScriptException You are not authorized to perform this operation.
       at Citrix.Console.PowerShellInteraction.CmdletExecutionMethods.CreateException[T](ICommonLog logger, ExecutionResults`1 results, ICmdletExecutionHost host)
       at Citrix.Console.PowerShellInteraction.CmdletExecutionMethods.Execute[T](ISdkCmdlet`1 sdkCmd, ICmdletExecutionHost host, Boolean allowFailover)
       at Citrix.Console.PowerShellSdk.HealthMonitor.Scripts.ValidateConfigurationServiceLocationScript.RunScript()
       at Citrix.Console.PowerShellInteraction.PowerShellScript`1.Run()
       at Citrix.Console.PowerShellSdk.PowerShellService.ValidateCentralConfigurationServiceLocation(String ccsLocation)
       at Citrix.Console.DeliveryCenter.UI.Dialogs.CcsValidator.ValidateCcs(String ccsLocation)
       at Citrix.Console.DeliveryCenter.UI.ViewModel.DesktopStudioViewModel.ConnectToSite(String ccsLocation, Boolean safeForDispatcher)
       at Citrix.Console.DeliveryCenter.UI.Mmc.StartupTabViewModel.<>c__DisplayClass2.<ConnectToSite>b__1()
       at Citrix.Console.CommonControls.ProgressDisplay.GenericProgressOperation.PerformOperationInternal()
       at Citrix.Console.CommonControls.ProgressDisplay.ProgressWindowOperation.PerformOperation()
       at Citrix.Console.CommonControls.ProgressDisplay.ProgressWindowViewModel.PerformAction(Action operationComplete)
   
    DesktopStudio_ErrorId : AuthorizationError
    Exception : Citrix.Fma.Sdk.ServiceCore.AuthorizationFailureException: Failed to authorize operation GetServiceStatus. Failed ISM for communication with Delegated Admin Service. ---> Citrix.Fma.Sdk.InterServiceManager.AllMatchingServiceInstancesFailedException: All the service instances that matched the requested client profile are in the failed state
       at Citrix.Fma.Sdk.InterServiceManager.InterServiceManager.FilterAndSort(ServiceFamily family)
       at Citrix.Fma.Sdk.InterServiceManager.InterServiceManager.GetPreferredServiceInstance(ServiceFamily serviceFamily)
       at Citrix.Fma.Sdk.InterServiceManager.WcfClientBase`1.SelectNewConnection()
       at Citrix.Fma.Sdk.InterServiceManager.WcfClientBase`1.MoveToNextConnection()
       at Citrix.Fma.Sdk.InterServiceManager.WcfClientBase`1.RegisteredCallAndRetry[TResult](Func`2 operation)
       at Citrix.Configuration.DelegatedAdminProvider.DemandPermission(String operation)
       --- End of inner exception stack trace ---
       at Citrix.Configuration.DelegatedAdminProvider.DemandPermission(String operation)
       at Citrix.Fma.Sdk.ServiceCore.LogicBase.DemandPermission(String operation, ServiceRegistrationStates localAdminStates)
       at Citrix.Fma.Sdk.ServiceCore.ServiceBase.<>c__DisplayClass10.<GetServiceStatus>b__f()
       at Citrix.Fma.Sdk.ServiceCore.ServiceBase.CheckedCall[T](String name, Func`1 operation, Func`2 defaultValue, Enum code)
    Reason : AuthorizationFailureException
    Message : Failed to authorize operation GetServiceStatus. Failed ISM for communication with Delegated Admin Service.
    Sdk Error Message : There was a problem communicating with the Citrix Delegated Administration Service.
    Sdk Error ID : Citrix.XDPowerShell.Status.AuthorizationError,Citrix.Configuration.Sdk.Cmdlets.Management.Commands.GetConfigServiceStatusCommand
    ErrorCategory : NotSpecified
    DesktopStudio_PowerShellHistory : ValidateConfigurationServiceLocationScript
    1/5/2015 8:52:27 AM
   
    Get-ConfigServiceStatus  -AdminAddress 'localhost'
    Get-ConfigServiceStatus : There was a problem communicating with the Citrix Delegated Administration Service.
     + CategoryInfo : PermissionDenied: (:) [Get-ConfigServiceStatus], UnauthorizedAccessException
     + FullyQualifiedErrorId : Citrix.XDPowerShell.Status.AuthorizationError,Citrix.Configuration.Sdk.Cmdlets.Management.Commands.GetConfigServiceStatusCommand
   
   

 

When he verify the permission with PowerShell ( Get-AdminEffectiveRight) he is full admins:

RoleId                        RoleName                      ScopeId                       ScopeName
------                        --------                      -------                       ---------
df20d111-4d0b-4502-ad12-5e... Full Administrator            00000000-0000-0000-0000-00... All

 

 

We tried to restart all related Services, but nothing helps. The issue is on both of the two DDC's.

 

What else could by test or try?

 

Regards,

Stephan

 

 

 

 

 

 

 

[CarlStalhood]

What version of XenDesktop? Check this:

 

Please do the following on all of your broker servers.

 

è Go to C:\Program Files\Citrix\DelegatedAdmin\Service on the broker server.

è Edit the “Citrix.DelegatedAdmin.exe.config” file.

 

Note: Please take a backup of the file before making changes.

 

     <services>

      <service behaviorConfiguration="ServiceBehavior" name="Citrix.DelegatedAdmin.DelegatedAdminContractEndpoint">

        <endpoint address="http://localhost:80/Citrix/DelegatedAdminContract/v1"

          binding="wsHttpBinding" bindingConfiguration="WsHttpBindingForRemoteAccess"

          name="SDK_Endpoint" contract="Citrix.DelegatedAdmin.Definitions.IDelegatedAdminContract" />

        <endpoint address="http://localhost:80/Citrix/DelegatedAdminContract/DelegatedAdminAPI/v1"

          binding="wsHttpBinding" bindingConfiguration="ServiceWsHttpBinding"

          name="InterService_Endpoint" contract="Citrix.DelegatedAdmin.Definitions.IDelegatedAdminApi" />

        <endpoint address="http://localhost:80/Citrix/DelegatedAdminContract/DelegatedAdminEnvTestAPI/v1"

          binding="wsHttpBinding" bindingConfiguration="ServiceWsHttpBinding"

          name="EnvTest_Endpoint" contract="Citrix.EnvTest.Interfaces.IEnvTestApi" />

      </service>

    </services>

    <bindings>

      <wsHttpBinding>

        <binding name="WsHttpBindingForRemoteAccess" maxReceivedMessageSize="9000000" receiveTimeout="00:10:00">

          <readerQuotas maxArrayLength="100000" maxStringContentLength="2000000" />

        </binding>

        <binding name="ServiceWsHttpBinding" receiveTimeout="00:10:00" useDefaultWebProxy="false" bypassProxyOnLocal="true"> èadd maxReceivedMessageSize for this binding similar to that of the binding above.

          <security mode="Message">

            <message clientCredentialType="Windows" />

          </security>

        </binding>

      </wsHttpBinding>

    </bindings>

 

è Save the file and test the launch of desktop studio.

 

 

[CarlStalhood]

I've seen problems with large Kerberos tickets (lots of groups, especially nested groups). Is that the case here?

[Stephan Schnider]

Hi Carl

 

Yes, this is the case here. But we have set the MaxTokenSize to prevent such issues.

 

[Stephan Schnider]

Perfect, thats the solution! But a restart of the corresponding service is needed. After that, I was able to login again.

Thank you very much!

[CarlStalhood]

When I checked my 7.6 Controller, it seems to be already configured. I'm guessing you're running an older version of XenDesktop.

[Stephan Schnider]

We have 7.5 in place.

[Dmitry Parmit1709152850]

Carl, you are a genius.  Even Citrix Support guy on the phone was impressed when I showed him this post.  This was while trying all other tricks that failed to resolve similar issue.  One thing to note here is that in my case, I had to play with the values a little bit.  I have XD 7.5 in Multi-Forest environment (about 50 domains).  So my magic number was not only maxReceivedMessageSize=10000000  (that's 7 zeros), but also receiveTimeout="00:20:00".   Setting receiverTimeout to 10 (default) produces above mentioned access error and setting to 15 made my full admin similar to view only admin.   20 did the trick.  Must remember to restart Citrix Delegated Administration Service every time you make a change. 

 

Thank you Carl for pointing to right direction!   I am just curious, how should one be able to find this by them selves?  Is it in Admin Guide?  Is it on Citrix e-docs? 

[CarlStalhood]

I had a customer with the same issue. Opened a case. The engineer found a solution.

[Jarian Gibson]

Nice to know!

[Dmitry Parmit1709152850]

Hey Carl, since I have your attention and not allowed to send any private messages, can I ask you to look at http://discussions.citrix.com/topic/362872-managing-power-of-xd-vdis

 

I am basically trying to slow down how quickly DDC sends command to hypervisor to power down VMs during off-peak hours.

 

Thank you advance.

sorry for stealing thread topic.

[Dmitry Parmit1709152850]

BTW, one thing to add, which might be very important for someone reading this.  Ever since I added above values, my Studio started working so much faster.  Closing without failures and if left running for hours idle, it used to take about a minute to reconnect again, or I had to end task and start it again and wait about same time to enter it again.  No more.  Takes 10 seconds to start.  If left idle takes 5-10 seconds to restart working.  Clean exit from studio with no crashes or please wait while offloading.... stuck on the screen for hours...   <sarcasm>Thank you Citrix for all those features and recommendation not to keep Studio running idle, instead of just suggesting how to fix the issue by increasing above mentioned parameters.</sarcasm>  Carl, you are da man! 

[Vishnu vardhan]

Hello Carl,

 

we are facing the same issue in XD 7.5 (its already configured maxReceivedMessageSize="9000000" in current environment)

 

please suggest

 

 

Error Id: XDDS:DB5EA0C9

 

Exception:

    Citrix.Console.Models.Exceptions.ScriptException You are not authorized to perform this operation.

       at Citrix.Console.PowerShellInteraction.CmdletExecutionMethods.CreateException[T](ICommonLog logger, ExecutionResults`1 results, ICmdletExecutionHost host)

       at Citrix.Console.PowerShellInteraction.CmdletExecutionMethods.Execute[T](ISdkCmdlet`1 sdkCmd, ICmdletExecutionHost host, Boolean allowFailover)

       at Citrix.Console.PowerShellSdk.HealthMonitor.Scripts.ValidateConfigurationServiceLocationScript.RunScript()

       at Citrix.Console.PowerShellInteraction.PowerShellScript`1.Run()

       at Citrix.Console.DeliveryCenter.UI.Dialogs.CcsValidator.ValidateCcs(String ccsLocation)

       at Citrix.Console.DeliveryCenter.UI.ViewModel.DesktopStudioViewModel.ConnectToSite(String ccsLocation, Boolean safeForDispatcher)

       at Citrix.Console.CommonControls.ProgressDisplay.ProgressWindowOperation.PerformOperation()

       at Citrix.Console.CommonControls.ProgressDisplay.ProgressWindowViewModel.PerformAction(Action operationComplete)

    

    DesktopStudio_ErrorId : AuthorizationError

    Exception : Citrix.Fma.Sdk.ServiceCore.AuthorizationFailureException: Failed to authorize operation GetServiceStatus. Delegated Admin Service not registered. ---> Citrix.Fma.Sdk.InterServiceManager.NoMatchingServiceInstanceException: None of the service instances retrieved from the configuration service match the requested client profile

       at Citrix.Fma.Sdk.InterServiceManager.InterServiceManager.FilterAndSort(ServiceFamily family)

       at Citrix.Fma.Sdk.InterServiceManager.InterServiceManager.GetPreferredServiceInstance(ServiceFamily serviceFamily)

       at Citrix.Fma.Sdk.InterServiceManager.WcfClientBase`1.SelectNewConnection()

       at Citrix.Fma.Sdk.InterServiceManager.WcfClientBase`1.RegisteredCallAndRetry[TResult](Func`2 operation)

       at Citrix.Configuration.DelegatedAdminProvider.DemandPermission(String operation)

       --- End of inner exception stack trace ---

       at Citrix.Configuration.DelegatedAdminProvider.DemandPermission(String operation)

       at Citrix.Fma.Sdk.ServiceCore.LogicBase.DemandPermission(String operation, ServiceRegistrationStates localAdminStates)

       at Citrix.Fma.Sdk.ServiceCore.ServiceBase.<>c__DisplayClass10.<GetServiceStatus>b__f()

       at Citrix.Fma.Sdk.ServiceCore.ServiceBase.CheckedCall[T](String name, Func`1 operation, Func`2 defaultValue, Enum code)

    Reason : AuthorizationFailureException

    Message : Failed to authorize operation GetServiceStatus. Delegated Admin Service not registered.

    Sdk Error Message : There was a problem communicating with the Citrix Delegated Administration Service.

    Sdk Error ID : Citrix.XDPowerShell.Status.AuthorizationError,Citrix.Configuration.Sdk.Cmdlets.Management.Commands.GetConfigServiceStatusCommand

    ErrorCategory : NotSpecified

    DesktopStudio_PowerShellHistory : ValidateConfigurationServiceLocationScript

    2-6-2015 21:29:37

    

    Get-ConfigServiceStatus  -AdminAddress 'xxxxx'

    Get-ConfigServiceStatus : There was a problem communicating with the Citrix Delegated Administration Service.

    + CategoryInfo : PermissionDenied: (:) [Get-ConfigServiceStatus], UnauthorizedAccessException

    + FullyQualifiedErrorId : Citrix.XDPowerShell.Status.AuthorizationError,Citrix.Configuration.Sdk.Cmdlets.Management.Commands.GetConfigServiceStatusCommand

    

    

Log in Eventvwr:

 

Otherwise unhandled exception in WCF call : Citrix.Fma.Sdk.ServiceCore.AuthorizationFailureException: Failed to authorize operation GetServiceStatus. Delegated Admin Service not registered. ---> Citrix.Fma.Sdk.InterServiceManager.NoMatchingServiceInstanceException: None of the service instances retrieved from the configuration service match the requested client profile

   at Citrix.Fma.Sdk.InterServiceManager.InterServiceManager.FilterAndSort(ServiceFamily family)

   at Citrix.Fma.Sdk.InterServiceManager.InterServiceManager.GetPreferredServiceInstance(ServiceFamily serviceFamily)

   at Citrix.Fma.Sdk.InterServiceManager.WcfClientBase`1.SelectNewConnection()

   at Citrix.Fma.Sdk.InterServiceManager.WcfClientBase`1.RegisteredCallAndRetry[TResult](Func`2 operation)

   at Citrix.Configuration.DelegatedAdminProvider.DemandPermission(String operation)

   --- End of inner exception stack trace ---

   at Citrix.Configuration.DelegatedAdminProvider.DemandPermission(String operation)

   at Citrix.Fma.Sdk.ServiceCore.LogicBase.DemandPermission(String operation, ServiceRegistrationStates localAdminStates)

   at Citrix.Fma.Sdk.ServiceCore.ServiceBase.<>c__DisplayClass10.<GetServiceStatus>b__f()

   at Citrix.Fma.Sdk.ServiceCore.ServiceBase.CheckedCall[T](String name, Func`1 operation, Func`2 defaultValue, Enum code)

[Rajat Pandita1709155206]

What worked for  me was Post # 4 from

Carl Stalhood

Thanks a lot for this solution. Appreciate your help !!

[Christian Cornelsen1709152196]

has anybody a new workaround or fix for the issue?

 

We have installed a new XD7.6 FP2 Farm and run into this issue. The config file was edit before from citrix with the value 900000 and we have set the timeout value to 20 from post #20

 

THX

[Carsten Singh-Dev]

I have a similar issue. I also tried the config changes, but they are already there in 7.6.

 

Here is my thread: http://discussions.citrix.com/topic/368417-xenapp-76-cant-login-into-studio-anymore/#entry1889271 

[Kishore G]

I have exactly similar issue, when i launch Studio i get error "You do not have sufficient permissions to administer this Site using Studio."

 

Here is the exception details:

 

Error Id: XDDS:F393C75A

 

Exception:

    Citrix.Console.DeliveryCenter.UI.Dialogs.CcsFailedException You do not have sufficient permissions to administer this Site using Studio.

       at Citrix.Console.DeliveryCenter.UI.ViewModel.DesktopStudioViewModel.ConnectToSite(String ccsLocation, Boolean safeForDispatcher, IProgressReporter progressReporter)

       at Citrix.Console.MmcSnapin.SnapInClass.OnLoadCustomSnapinData(AsyncStatus status, Byte[] persistenceData)

    

    

Inner Exception:

    Citrix.Console.Models.Exceptions.PermissionDeniedException You are not authorized to perform this operation.

       at Citrix.Console.PowerShellInteraction.CmdletExecutionMethods.CreateException[T](ICommonLog logger, ExecutionResults`1 results, ICmdletExecutionHost host)

       at Citrix.Console.PowerShellInteraction.CmdletExecutionMethods.Execute[T](ISdkCmdlet`1 sdkCmd, ICmdletExecutionHost host, Boolean allowFailover)

       at Citrix.Console.PowerShellSdk.HealthMonitor.Scripts.ValidateConfigurationServiceLocationScript.RunScript()

       at Citrix.Console.PowerShellInteraction.PowerShellScript`1.Run()

       at Citrix.Console.PowerShellSdk.PowerShellService.ValidateCentralConfigurationServiceLocation(String ccsLocation)

       at Citrix.Console.DeliveryCenter.UI.Dialogs.CcsValidator.ValidateCcsInternal(String ccsLocation)

       at Citrix.Console.DeliveryCenter.UI.Dialogs.CcsValidator.ValidateCcs(String ccsLocation)

       at Citrix.Console.DeliveryCenter.UI.ViewModel.DesktopStudioViewModel.ConnectToSite(String ccsLocation, Boolean safeForDispatcher, IProgressReporter progressReporter)

    

    DesktopStudio_ErrorId : AuthorizationError

    Exception : Citrix.Fma.Sdk.ServiceCore.AuthorizationFailureException: Failed to authorize operation GetServiceStatus. CheckGlobalAccess failed.

       at Citrix.Configuration.DelegatedAdminProvider.DemandPermission(String operation)

       at Citrix.Fma.Sdk.ServiceCore.LogicBase.DemandPermission(String operation, ServiceRegistrationStates localAdminStates)

       at Citrix.Fma.Sdk.ServiceCore.ServiceBase.<>c__DisplayClass10.<GetServiceStatus>b__f()

       at Citrix.Fma.Sdk.ServiceCore.ServiceBase.CheckedCall[T](String name, Func`1 operation, Func`2 defaultValue, Enum code)

    Reason : AuthorizationFailureException

    Message : Failed to authorize operation GetServiceStatus. CheckGlobalAccess failed.

    Sdk Error Message : There was a problem communicating with the Citrix Delegated Administration Service.

    Sdk Error ID : Citrix.XDPowerShell.Status.AuthorizationError,Citrix.Configuration.Sdk.Cmdlets.Management.Commands.GetConfigServiceStatusCommand

    ErrorCategory : PermissionDenied

    DesktopStudio_PowerShellHistory : ValidateConfigurationServiceLocationScript

    10/28/2015 8:01:01 PM

    

    Get-ConfigServiceStatus  -AdminAddress "localhost"

    Get-ConfigServiceStatus : There was a problem communicating with the Citrix Delegated Administration Service.

                + CategoryInfo : PermissionDenied: (:) [Get-ConfigServiceStatus], UnauthorizedAccessException

                + FullyQualifiedErrorId : Citrix.XDPowerShell.Status.AuthorizationError,Citrix.Configuration.Sdk.Cmdlets.Management.Commands.GetConfigServiceStatusCommand

    

    

Inner Exception:

    System.UnauthorizedAccessException There was a problem communicating with the Citrix Delegated Administration Service.

       at System.Management.Automation.MshCommandRuntime.ThrowTerminatingError(ErrorRecord errorRecord)

 

 

 

I captured CDF traces & found that there is a system exception:

CDF_NET_ERROR,"GetSAMNameFromWindows() failed: System.SystemException: The trust relationship between the primary domain and the trusted domain failed.

 

This indicates that admins SID is no longer valid, or there???

 

Checked the table DAS.Administrators in SQL DB, and found a corrupt user SID which belonged to admin of trusted domain.

 

ran the below query to remove that user SID from DB,

Delete from DAS.Administrator

where ID=3

 

Note: 3 was the ID of the corrupt user SID.

 

 

After removing that SID, i was able to connect to my Xendesktop site using Studio.

 

 

 

 

[Ravi Yadav1709153570]

Hello Guys, 

 

I am getting below error, can someone please assist.

 

Error Id: XDDS:DB5EA0C9

 

Exception:

    Citrix.Console.Models.Exceptions.ScriptException Unexpected error. Contact Citrix Support.

       at Citrix.Console.PowerShellInteraction.CmdletExecutionMethods.CreateException[T](ICommonLog logger, ExecutionResults`1 results, ICmdletExecutionHost host)

       at Citrix.Console.PowerShellInteraction.CmdletExecutionMethods.Execute[T](ISdkCmdlet`1 sdkCmd, ICmdletExecutionHost host, Boolean allowFailover)

       at Citrix.Console.PowerShellSdk.HealthMonitor.Scripts.ValidateConfigurationServiceLocationScript.RunScript()

       at Citrix.Console.PowerShellInteraction.PowerShellScript`1.Run()

       at Citrix.Console.DeliveryCenter.UI.Dialogs.CcsValidator.ValidateCcs(String ccsLocation)

       at Citrix.Console.DeliveryCenter.UI.ViewModel.DesktopStudioViewModel.ConnectToSite(String ccsLocation, Boolean safeForDispatcher)

       at Citrix.Console.CommonControls.ProgressDisplay.ProgressWindowOperation.PerformOperation()

       at Citrix.Console.CommonControls.ProgressDisplay.ProgressWindowViewModel.PerformAction(Action operationComplete)

    

    DesktopStudio_ErrorId : ExceptionThrown

    Sdk Error Message : The request channel timed out while waiting for a reply after 00:09:59.9990012. Increase the timeout value passed to the call to Request or increase the SendTimeout value on the Binding. The time allotted to this operation may have been a portion of a longer timeout.

    Sdk Error ID : Citrix.XDPowerShell.Status.ExceptionThrown,Citrix.Configuration.Sdk.Cmdlets.Management.Commands.GetConfigServiceStatusCommand

    ErrorCategory : NotSpecified

    DesktopStudio_PowerShellHistory : ValidateConfigurationServiceLocationScript

    5/5/2016 11:33:34 AM

    

    Get-ConfigServiceStatus  -AdminAddress 'test.abc.com'

    Get-ConfigServiceStatus : The request channel timed out while waiting for a reply after 00:09:59.9990012. Increase the timeout value passed to the call to Request or increase the SendTimeout value on the Binding. The time allotted to this operation may have been a portion of a longer timeout.

    + CategoryInfo : NotSpecified: ( :) [Get-ConfigServiceStatus], TimeoutException

    + FullyQualifiedErrorId : Citrix.XDPowerShell.Status.ExceptionThrown,Citrix.Configuration.Sdk.Cmdlets.Management.Commands.GetConfigServiceStatusCommand

 

Thanks in advance.

 

Regards

Ravi Yadav

[CarlStalhood]

Need more info. What version of Studio? Are you seeing this problem when running Studio directly on the Controller? Is this a new problem (did it work before?)

[Ravi Yadav1709153570]

Hi Carl,

 

We are using XenDesktop 7.5.

 

we have two broker servers and non of them are working. Yes we are facing this issue while running studio on the controller servers.

 

Both the servers were working fine earlier.

[Ravi Yadav1709153570]

Hello Guys, Please help me as Now I am getting below error On my Primary DDC.

 

"There was an error communicating with the Delivery Controller. Check that the Delivery Controller is ON and its DNS records are correct; the Citrix Configuration Service is running on the Delivery Controller; and any firewalls are configured to allow communication"

 

and On Secondary as soon I open Studio I get a new Console where I am entering my primary delivery controller name then it prompting to Would you like XenDesktop to update the database automatically' prompt? 

 

Please help what should I do here to fix the issue, Everything was working since last 2 year and suddenly I got this issue.

[zhivko georgiev1709156867]

Hi Guys,

 

I seem to have absolutely the same issue after we upgraded from 7.6.1 to 7.8 environment. it looks like the user who actually did the upgrade doesn't experience such an issue but I can't open the Machine catalog. I checked the Citrix Deligated admin service file and all is fine there. Also the service was restarted but it is still the same. Has anyone come to a permanent solution? GetDbConnection is not giving any access denied. 

 

Thank you

[venkatesh ramagoni]

Hi Carl,

 

I am getting this error in Power shell while trying to set dbconnection : there was a problem communicating with the citrix delegated administration service. 

 

I am using Administrator account to login to Delivery controller server for this task.

 

What can be done? Actually I am working on a Migration project now(Citrix XD from one domain to another domain , Kindly give me any suggestion for smooth migration).

 

 

Regards,

Venkatesh

[Martin Walzak]

Hi,

 

Same issue here. New project for XenApp 7 and this Citrix error is causing AGAIN additional costs for the client.

 

Deployed XA7.8 fine but after 3 days this error came up and nothing was accessible anymore.

 

Deleted DDC server and rebuild a new server. Installed XA 7.9 during setup the database creation failed.

Clicked on New Site setup again and the below error comes up again.

 

This is again so annoying during a project and a fresh deployment of a XenApp product.

 

 Set-HypAdminConnection  -AdminAddress "localhost"

    Get-ChildItem  -LiteralPath @("XDHyp:\Connections")

    Get-ChildItem : There was a problem communicating with the Citrix Delegated Administration Service.

    + CategoryInfo : PermissionDenied: (:) [Get-ChildItem], UnauthorizedAccessException

    + FullyQualifiedErrorId : Citrix.XDPowerShell.Status.AuthorizationError,Microsoft.PowerShell.Commands.GetChildItemCommand

    

    

Inner Exception:

    System.UnauthorizedAccessException There was a problem communicating with the Citrix Delegated Administration Service.

    

    

Citrix please rectify above issue.

 

Thanks,

[Matt Harding1709156145]

I am getting error when adding another Delivery controller in to farm. I have DB Owner access to SQL 2012.

running XenApp 7.8 and have full admin access to it.

 

Error : You do not have necessary permissions on the remote site to perform this join operation.

 

 

rror Id: XDDS:E3C75A28

 

Exception:

    Citrix.Console.Models.Exceptions.PermissionDeniedException You do not have the necessary permissions on the remote site to perform this join operation.

       at Citrix.Console.DeliveryCenter.UI.Dialogs.JoinExistingSiteDialogViewModel.OkBackgroundOperation(IProgressReporter progressReporter)

       at Citrix.Console.Common.OperationTimer.TimeBlock(Action operation)

       at Citrix.Console.CommonControls.ProgressDisplay.GenericProgressOperationWithFeedBack.PerformOperationInternal()

       at Citrix.Console.CommonControls.ProgressDisplay.ProgressWindowOperation.PerformOperation()

       at Citrix.Console.CommonControls.ProgressDisplay.ProgressWindowViewModel.PerformAction(Action operationComplete)

    

    DesktopStudio_ErrorId : UnknownError

    ErrorCategory : PermissionDenied

    

Inner Exception:

    Citrix.Console.Models.Exceptions.PermissionDeniedException Incorrect user name or password. Please check your credentials and try again.

       at Citrix.Console.PowerShellInteraction.ThreadedDatabaseScript`1.RunScript()

       at Citrix.Console.PowerShellInteraction.PowerShellScript`1.Run()

       at Citrix.Console.PowerShellSdk.DatabaseService.Scripts.ValidateDatabaseCredentialsScript.ValidateConnection()

       at Citrix.Console.PowerShellSdk.DatabaseService.Scripts.ValidateDatabaseCredentialsScript.RunScript()

       at Citrix.Console.PowerShellInteraction.PowerShellScript`1.Run()

       at Citrix.Console.PowerShellSdk.SiteService.Scripts.JoinExistingSiteValidationScript.RunScript()

       at Citrix.Console.PowerShellInteraction.PowerShellScript`1.Run()

       at Citrix.Console.DeliveryCenter.UI.Dialogs.JoinExistingSiteDialogViewModel.OkBackgroundOperation(IProgressReporter progressReporter)

    

    DesktopStudio_ErrorId : UnknownError

    ErrorCategory : PermissionDenied

    DesktopStudio_PowerShellHistory : VerifyDatabaseServerExistsScript

    13/10/2016 12:42:55

    

    

    

Inner Exception:

    Citrix.Console.Common.Exceptions.LogOnFailedException Incorrect user name or password. Please check your credentials and try again.

       at Citrix.Console.Common.Services.CredentialsService.Citrix.Console.Common.Services.ICredentialsService.StartImpersonatingUser(UserCredentials credentials)

       at Citrix.Console.PowerShellInteraction.ThreadedDatabaseScript`1.RunScript()

[zhiguang zhao1709157565]

Hi All：

  I also have met this problem. And I have solved the problem by  rejoining DDC to Domain .

 

Error Id: XDDS:61EA13D6

 

异常:

    Citrix.Console.Models.Exceptions.PermissionDeniedException 您无权执行此操作。

       在 Citrix.Console.PowerShellInteraction.CmdletExecutionMethods.CreateException[T](ICommonLog logger, ExecutionResults`1 results, ICmdletExecutionHost host)

       在 Citrix.Console.PowerShellInteraction.CmdletExecutionMethods.Execute[T](ISdkCmdlet`1 sdkCmd, ICmdletExecutionHost host, Boolean allowFailover)

       在 Citrix.Console.PowerShellSdk.SiteService.Scripts.GetSiteNameScript.RunScript()

       在 Citrix.Console.PowerShellInteraction.PowerShellScript`1.Run()

       在 Citrix.Console.PowerShellSdk.SiteService.PSSiteService.GetSiteName()

       在 Citrix.Console.DeliveryCenter.UI.ViewModel.DesktopStudioViewModel.LoadSiteState(IProgressReporter progressReporter)

       在 Citrix.Console.DeliveryCenter.UI.ViewModel.DesktopStudioViewModel.ConnectToSite(String ccsLocation, Boolean safeForDispatcher, IProgressReporter progressReporter)

       在 Citrix.Console.DeliveryCenter.UI.Mmc.StartupTabViewModel.<>c__DisplayClass2.<ConnectToSite>b__1(IProgressReporter p)

       在 Citrix.Console.CommonControls.ProgressDisplay.GenericProgressOperationWithFeedBack.PerformOperationInternal()

       在 Citrix.Console.CommonControls.ProgressDisplay.ProgressWindowOperation.PerformOperation()

       在 Citrix.Console.CommonControls.ProgressDisplay.ProgressWindowViewModel.PerformAction(Action operationComplete)

    

    DesktopStudio_ErrorId : AuthorizationError

    Exception : Citrix.Fma.Sdk.ServiceCore.AuthorizationFailureException: Failed to authorize operation GetSite. Inter-service manager not initialized. ---> Citrix.Fma.Sdk.InterServiceManager.InitializationException: The inter service manager must first be initialized

       at Citrix.Fma.Sdk.InterServiceManager.WcfClientBase`1.VerifyMachineIsRegistered()

       at Citrix.Fma.Sdk.InterServiceManager.WcfClientBase`1.CallAndRetry[TResult](Func`2 operation)

       at Citrix.Configuration.DelegatedAdminProvider.DemandPermission(String operation)

       --- End of inner exception stack trace ---

       at Citrix.Configuration.DelegatedAdminProvider.DemandPermission(String operation)

       at Citrix.Configuration.SDK.ConfigurationService.<>c__DisplayClass2e.<GetSite>b__2d()

       at Citrix.Fma.Sdk.ServiceCore.ServiceBase.CheckedCall[T](String name, Func`1 operation, Func`2 defaultValue, Enum code)

    Reason : AuthorizationFailureException

    Message : Failed to authorize operation GetSite. Inter-service manager not initialized.

    Sdk Error Message : There was a problem communicating with the Citrix Delegated Administration Service.

    Sdk Error ID : Citrix.XDPowerShell.Status.AuthorizationError,Citrix.Configuration.Sdk.Cmdlets.Commands.GetConfigSiteCommand

    ErrorCategory : PermissionDenied

    DesktopStudio_PowerShellHistory : GetSiteNameScript

    2016/12/9 15:23:54

    

    Get-ConfigSite  -AdminAddress "yc-ctx-ddc2.sinosig.com:80"

    Get-ConfigSite : There was a problem communicating with the Citrix Delegated Administration Service.

    + CategoryInfo : PermissionDenied: (:) [Get-ConfigSite], UnauthorizedAccessException

    + FullyQualifiedErrorId : Citrix.XDPowerShell.Status.AuthorizationError,Citrix.Configuration.Sdk.Cmdlets.Commands.GetConfigSiteCommand

    

    

内部异常:

    System.UnauthorizedAccessException There was a problem communicating with the Citrix Delegated Administration Service.

       在 System.Management.Automation.MshCommandRuntime.ThrowTerminatingError(ErrorRecord errorRecord)