SCOM agent less monitoring access denied event id 10401

Today I was facing and error with monitoring agentless servers. The agent proxy was getting access denied to event logs. In my environment the health services run under the local system account.

Module was unable to connect to namespace ‘\\computername\ROOT\CIMV2’

This has happened 1 times since this instance was loaded.

HRESULT: 0x80041003 Details: Access denied

One or more workflows were affected by this.

Workflow name: Microsoft.SystemCenter.DiscoverWindowsClientComputer
Instance name:
Instance ID:
Management group:

I added the server account to administrators on the agentless server but it did not help.

Then I changed the default action account profile for the server managing the agentless monitoring  to specify another action account instead of the local system action account to run the healthservices under. Same account was also added to the local administrators on the agentless managed computer.


About parag waghmare

I am working on the Windows technologies for a long time now. Primarily working as a Service Engineer on System Center products. Right now on System Center 2012 and Windows Server 2012. I have worked extensively on MOM 2005 to SCOM 2007 migrations and SCOM 2007 to SCOM 2012 migrations.
This entry was posted in System Center Operations Manager. Bookmark the permalink.

Leave a Reply

Fill in your details below or click an icon to log in: Logo

You are commenting using your account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s