When browsing to the Helpdesk portal, the “Access Denied -2147024891” error is displayed.
This error can occur if the Help-Desk portal is installed on a machine separate from the NetWrix Account Lockout Examiner server. In this case credentials are passed from the web-portal to the core service over the network and connection gets refused, because the machine, where Help-Desk portal is installed, is not trusted to use services on other machines.
In this case, you have to trust the Web-server`s computer account for delegation to enable passing credentials from the client (web browser) to the ALE server through the Help-Desk portal (web browser->portal->ALE server).
- Run Active Directroy Users and Computers
- Locate the account of the machine, where Help-Desk portal is installed
- Right click it and select Properties
- On the Delegation tab set “Trust this computer for delegation to any services (Kerberos only)” radio button.
- Apply settings
Note: A reboot of the Web-server might be needed