locked
Setting VPNv2 Eap/Configuration gives Access is denied error. RRS feed

  • Question

  • I am trying to set Eap/Configuration using the command as follows.

    <Add>
    				<CmdID>cca8af03-7cd0-45f7-9e90-bddc457e131b</CmdID>
    				<Item>
    					<Target>
    						<LocURI>./User/Vendor/MSFT/VPNv2/my_vpn/NativeProfile/Authentication/Eap/Configuration</LocURI>
    					</Target>
    					<Meta>
    						<Format xmlns=&quot;syncml:metinf&quot;>chr</Format>
    					</Meta>
    					<Data>&lt;EapHostConfig xmlns=&quot;http://www.microsoft.com/provisioning/EapHostConfig&quot;&gt;&lt;EapMethod&gt;&lt;Type xmlns=&quot;http://www.microsoft.com/provisioning/EapCommon&quot;&gt;13&lt;/Type&gt;&lt;VendorId xmlns=&quot;http://www.microsoft.com/provisioning/EapCommon&quot;&gt;0&lt;/VendorId&gt;&lt;VendorType xmlns=&quot;http://www.microsoft.com/provisioning/EapCommon&quot;&gt;0&lt;/VendorType&gt;&lt;AuthorId xmlns=&quot;http://www.microsoft.com/provisioning/EapCommon&quot;&gt;0&lt;/AuthorId&gt;&lt;/EapMethod&gt;&lt;Config xmlns=&quot;http://www.microsoft.com/provisioning/EapHostConfig&quot;&gt;&lt;Eap xmlns=&quot;http://www.microsoft.com/provisioning/BaseEapConnectionPropertiesV1&quot;&gt;&lt;Type&gt;13&lt;/Type&gt;&lt;EapType xmlns=&quot;http://www.microsoft.com/provisioning/EapTlsConnectionPropertiesV1&quot;&gt;&lt;CredentialsSource&gt;&lt;CertificateStore&gt;&lt;SimpleCertSelection&gt;true&lt;/SimpleCertSelection&gt;&lt;/CertificateStore&gt;&lt;/CredentialsSource&gt;&lt;ServerValidation&gt;&lt;DisableUserPromptForServerValidation&gt;false&lt;/DisableUserPromptForServerValidation&gt;&lt;ServerNames&gt;&lt;/ServerNames&gt;&lt;/ServerValidation&gt;&lt;DifferentUsername&gt;false&lt;/DifferentUsername&gt;&lt;PerformServerValidation xmlns=&quot;http://www.microsoft.com/provisioning/EapTlsConnectionPropertiesV2&quot;&gt;false&lt;/PerformServerValidation&gt;&lt;AcceptServerName xmlns=&quot;http://www.microsoft.com/provisioning/EapTlsConnectionPropertiesV2&quot;&gt;true&lt;/AcceptServerName&gt;&lt;/EapType&gt;&lt;/Eap&gt;&lt;/Config&gt;&lt;/EapHostConfig&gt;</Data>
    				</Item>
    			</Add>


    But the command fails and in Windows 10 Event logs, I can see this log.

    MDM ConfigurationManager: Command failure status. Configuration Source ID: (58A934A3-822A-49A0-AE7A-585C7FD11FD8), Enrollment Name: (MDMFull), Provider Name: (VPNv2), Command Type: (CmdType_Add), CSP URI: (./User/Vendor/MSFT/VPNv2/my_vpn/NativeProfile/Authentication/Eap), Result: (Access is denied.).


    Friday, January 27, 2017 7:53 AM