Session Recording Server returns HTTP 401 when Agent runs PolicyQuery

Session Recording Server returns HTTP 401 when Agent runs PolicyQuery

book

Article ID: CTX239599

calendar_today

Updated On:

Description

When setting up a new Virtual Apps and Desktops environment, every policy query attempt fails with 401 Error in IIS. This can manifest itself in several ways

  • On startup of the Session Recording Agent Service, an error describing the 401 error will be recorded in the event log.
  • Policies will not be queried by the Session Recording Agent.
  • Recordings of the session will not be captured.

Resolution

Ensure that NT AUTHORITY\Authenticated Users group is a member of the local Users group on the Session Recording agent.

User-added image

Problem Cause

This issue is due to the “NT AUTHORITY\Authenticated Users” group being removed from local Users group in Session Recording Server. This membership is required for IIS Windows Authentication to function properly.

Issue/Introduction

When setting up a new Virtual Apps and Desktops environment using AWS cloud, every policyquery attempt fails with 401.3 Error in IIS