Desktop launch fails intermittently. The following entries are written to the Windows Application event log or captured in a CDF trace:

Log Name:          Application
Source:          CitrixConfigurationService
Event ID: 1006
Level: Warning
Description:
Inner exception: System.UnauthorizedAccessException: Request for principal permission failed. ---> System.Security.SecurityException: Request for principal permission failed.

Log Name: Application
Source: CitrixConfigurationService
Event ID: 1007
Level: Warning
Description:
Otherwise unhandled exception in WCF call: System.UnauthorizedAccessException: Request for principal permission failed. ---> System.Security.SecurityException: Request for principal permission failed.

CDF Trace:
182,0,(05/15/2012) 17:44:25:633,1484,2656,_#dotNet#_,******,******,******,******,******,"ConfigurationServiceLog:8:5:-> GetServiceGroupUid - Entry"
183,0,(05/15/2012) 17:44:25:634,1484,2656,_#dotNet#_,******,******,******,******,******,"ConfigurationServiceLog:2:3:Called by NT AUTHORITY\NETWORK SERVICE"
184,0,(05/15/2012) 17:44:25:634,1484,2656,_#dotNet#_,******,******,******,******,******,"ConfigurationServiceLog:2:6:who is a local administrator, and"
185,0,(05/15/2012) 17:44:25:634,1484,2656,_#dotNet#_,******,******,******,******,******,"ConfigurationServiceLog:2:6:who is acting in roles Citrix.XDServiceBase.Reader, Citrix.XDServiceBase.Writer"
186,0,(05/15/2012) 17:44:25:635,1484,2656,_#dotNet#_,******,******,******,******,******,"ConfigurationServiceLog:2:1:The operation threw an exception System.UnauthorizedAccessException: Request for principal permission failed. ---> System.Security.SecurityException: Request for principal permission failed.

Remove the Network Service account from the local Administrators group on the Controller (DDC) where these event log entries are found. The Network Service account provides sufficient privileges for the Controller services to run properly.

Problem Cause

This issue occurs when the Network Service account is included in the local Administrators group on the Controller (DDC) where these event log entries are found.

CTX127998 – Database Access and Permission Model for XenDesktop 5