Access to virtual machines on different domain

[pemur]

I have an interesting problem here - a new install of LANsweeper, working fine for all systems on the parent domain. It also works for physical servers and clients on a different domain, with a trust relationship back to the parent. However, it will not return data for virtual servers or clients that belong to the second domain, even while it works perfectly for virtual systems on the parent domain co-hosted with these failing boxes.

The error returned is the ubiquitous "Access is denied 0x80070005", although I have confirmed that port 135 is open, all WMI and RPC functionality is OK and DCOM appears fine.

The failure is entirely restricted to cross-domain virtual systems - any clues?

[Hemoco]

Do you see anything in the errorlog.txt file for this system?

[pemur]

We're down to a single VM that won't report its software.

The system (Windows 7 Pro) answers to all WMI enquiries from testconnection.exe, has no firewall running, has WMI/RPC/Remote Registry services all operational, but always returns 'Never scanned software'

We have seen this previously (with a physical workstation). Nothing seemed to work for around two or three days, then without any obvious changes the system suddenly decided to return full reports. So maybe a little patience is required; I don't quite buy 'the only way' statement, but neither do I have an alternative explanation - yet.

FWIW, we're finding the application does work very well for nearly all our aims. I'm writing new reports to monitor application versions etc, and may have a few suggestions for the wishlist threads

[pemur]

OK, I don't know what's happened over the weekend (at work anyway, I think I recall most of my weekend!), but all the systems have responded in some form or another to the automatic scans. I now have a few that claim they've been able to scan the OS, but not the software (albeit without any reported errors), and others that seem to have a full scan.

Is there some issue requiring repeated scans to get a complete picture? We were running both locally initiated scans and triggering remote scans from the server repeatedly without success. Then I leave it alone for two days and it starts working? Weird.

[Hemoco]

Is there some issue requiring repeated scans to get a complete picture?

No, the only way this can happen is because the service is stopped during the middle of the scan or the machine is rebooted.

[Hemoco]

Can't think of anything else then a firewalling issue.
Lansweeper server sees the virtual machines as any other machine.

[pemur]

Yes, alternative credentials are in place - I had been using the primary domain admin credentials, and relying on the trust relationship, but I've bitten the bullet and put the appropriate ones in for the secondary domains. It didn't help.

This is affecting three secondary domains in total, and in all cases it's the same pattern - real hardware gets audited, virtual systems don't, whereas all systems on the primary domain work.

[Hemoco]

Have you configured the alternate credentials for this domain with the correct username/password.

[pemur]

Yep, DNS is fine.

The firewall services on both the host server and the virtual server have been disabled and are known to be stopped.

testconnection.exe from the Lansweeper server returns a successful connection for both WMI and the remote registry.

The systems that are failing are a mixture of Windows XP images, and Windows Server - both 2003 and 2008. I have successful real and virtual machines for all these environments.

[Hemoco]

Is dns resolving to the correct IP address?
Does the virtual's machine host system have a firewall enabled?