Notice: This website is an unofficial Microsoft Knowledge Base (hereinafter KB) archive and is intended to provide a reliable access to deleted content from Microsoft KB. All KB articles are owned by Microsoft Corporation. Read full disclaimer for more details.

ConfigMgr 2007: Software Deployments Failing With Error Code 0x8007089a


Symptoms

On certain machines all Configuration Manager 2007 software deployment fail with the error code 0x8007089a (The specified username is invalid.).  However, the same deployments are successfull on other machines in the same collection.

↑ Back to the top


Cause

The process fails when the client machine tries to use the cryptographic provider to interpret the Network Access Account.  We are using the 3DES algorithm for the Network Access Account but the machine that is failing is using the Microsoft Base Cryptographic Provider v1.0 which does not support the 3DES algorithm.  The Microsoft Base Cryptographic Provider v1.0 is an old provider.  The machine should be using Microsoft Strong Cryptographic Provider which does support the 3DES algorithm.

↑ Back to the top


Resolution

When a third party product from Concerto was installed it created a registry key in HKU\.DEFAULT\Software\Microsoft\Cryptography\Providers\Type 001.  The provider was set here to Microsoft Base Cryptographic Provider v1.0. Configuration Manager 2007 found this cryptographic provider first and tried using it but since it doesn't support the 3DES algorithm it fails.  Removing the Concerto software does not remove this registry key.  After manually deleting the Cryptography key, Configuration Manager 2007 was able to find the Microsoft Strong Cryptographic Provider in HKLM\SOFTWARE\Microsoft\Cryptography\Defaults\Provider Types\Type 001. All software deployments now run successfully.

↑ Back to the top


Keywords: vkball, kb

↑ Back to the top

Article Info
Article ID : 2003821
Revision : 1
Created on : 1/8/2017
Published on : 7/8/2010
Exists online : False
Views : 126