Forum Discussion

Brass Contributor

Jan 25, 2019

Constantly prompted for Administrator credential, while logged in as Local Admin

Hi All! I've been trying out the Windows Admin Center, and have what I think is a pretty simple setup. I have a single box I want to use as my Storage Migration Service orchestrator. It's an A...

John Wildes

Brass Contributor

Jan 29, 2019

Thanks Jeff,

The troubleshooting doc didn't cover the scenario that I'm experiencing, everything else is working ok. Again the problem is that I have one server, joined to the domain, with WAC installed. I'm using WAC to manage and administer the Storage Migration Service ON THIS BOX. I cannot administer this box, without using the local admin account on the box, even though it is domain joined, and the domain account I want to use with WAC is a local admin on the box, is an enterprise and domain admin. Nothing works when I manage the local server (where WAC is installed as well) as a domain admin account, and only works when I use a local account.

>>>REQUESTED TROUBLESHOOTING<<<

Platform where Windows Admin Center is installed (Windows 10 or Windows Server): Windows Server
If installed on Server, what is the Windows version of the machine running the browser to access Windows Admin Center: WAC 1809.5

Are you using the self-signed certificate created by the installer? Self Signed
Did you install with the default port setting? YES
Is the machine where Windows Admin Center is installed joined to a domain? YES
Windows version where Windows Admin Center is installed: Windows 2019 GA - 17763 Build
Is the machine that you are trying to manage joined to a domain? YES (same machine where WAC is installed)
Windows version of the machine that you are trying to manage: Windows 2019
What browser are you using? CHROME
If you are using Google Chrome, what is the version? 71.0.3578.98 (Official Build) (64-bit)

Jeff Woolslayer

Former Employee

Jan 29, 2019

Thanks for the additional info. I need to tease this apart in two issues:

1) Excessive credential prompts
This is a known issue with Chrome, which makes the management of the local server painful because you don't have an option to use Edge.
If you have the option, try accessing WAC from a remote W10 machine using Edge.
We have done some work recently to address these excessive credential prompts in Chrome. Those changes will be in the next preview release. With these changes, the experience is still not as seamless as Edge, but better than it is now.

2) Can't authenticate with domain account

In some cases, Windows will require users that are not the built-in Administrator to be a member of the Remote Management Users local group. try adding your domain account there. Even though you are managing the localhost, WAC treats it as a remote machine when creating PowerShell sessions to execute your actions.

If that doesn't help, you may need to disable the LocalAccountTokenFilterPolicy. You'll do this with the following:

REG ADD HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System /v LocalAccountTokenFilterPolicy /t REG_DWORD /d 1

Let me know if that unblocks you!