Overview

Device scan fails with error:

Failed to enumerate devices, error description: Access is denied. (5)

Environment

• GFI EndPointSecurity
• Microsoft Operating System with UAC

Root Cause

User Account Control (UAC) remote restrictions prevent the Device Scanner from retrieving information remotely. For more information, refer the Microsoft's KnowledgeBase.

Resolution

Ensure that the GFI EndPointSecurity Service is running with the account that has domain admin privileges. Change the account and restart the services if that is not the case.
Then perform the following on the client machine:

1. Click Start > Run and type regedit, and then press Enter.

2. Locate and then click the registry subkey HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System

3. If the LocalAccountTokenFilterPolicy registry entry does not exist, follow these steps:

   • On the Edit menu, point to New, and then click DWORD Value.

   • For value, type LocalAccountTokenFilterPolicy and then press Enter.

4. Right-click LocalAccountTokenFilterPolicy, and then click Modify.

5. In the Value data box, type 1, and then click, OK.

6. Exit Registry Editor.