When using TIBCO Scribe® Insight, there is an option to install a workstation and console on a remote computer. This article addresses how to troubleshoot when adding a new site fails with “Access is denied.”

Copy the Install media to the remote system and run setup.exe, choosing Insight Workstation and making sure the directory folder is correct.

Press Next and follow the wizard prompts.

When the installation is complete, open the TIBCO Scribe® console, then right click on TIBCO Scribe® Console and select add a new site as the screenshot indicates: 

Fill in the information on the form, selecting "Network" for Site Type, then type in Site Name, and for Network server, type in the TIBCO Scribe® Insight server name or its IP address. Make sure you can ping your TIBCO Scribe® Insight server by name or by IP from the machine you installed the workstation on.

When complete test the “Scribe Site” Connection. 

After you test the site connection, if you receive the Access is denied error, please follow these steps to resolve:

On the Insight workstation, open a command prompt and type : whoami

This will return your domain\user name.

Log to the remote TIBCO Scribe® Insight server, run: computer management and check that the user used on the insight workstation is a member of the Scribe Console User Group. Then make sure the Scribe services are running under a domain account user who is also a member of the Scribe Console User Group.

Test the site again. If you still get the error, try the following:

Log to the TIBCO Scribe® Insight server and go to Control Panel,->System and Security->Administrative Tools-> Component Services->Computers

Select “My Computer” in the right pane + right-click ->Properties.

Select the COM Security tab, then choose Edit Default for Access Permissions.

In the Access Permission dialog box, click Add.

And enter Scribe Console Users + check names  and click OK or use the Advanced button and select the Scribe Console Users

In the Access Permission dialog box, choose "allow" permissions to the Scribe Console Users group for both Local Access and Remote Access. Click OK.

Next, return to My Computer Properties dialog box, on the COM Security tab, in the Launch and Activation Permission box, click Edit Default.

Click Add and enter  Scribe Console Users + check names  and click OK.

In the Launch Permission dialog box, "allow" permissions to the Scribe Console Users group for Local Launch, Remote Launch, Local Activation, and Remote Activation. Click OK.

Click OK to close the My Computer Properties dialog box and close the Component Services dialog box.

In Control Panel->System and Security->Administrative tools: double-click Local Security Policy.

Select Local Policies and double click on Security Options ( in the right pane)

Double-click DCOM: Machine Launch Restrictions in Security Descriptor Definition Language (SDDL) syntax.

In the DCOM: Machine Launch Restrictions in Security Descriptor Definition Language (SDDL) syntax dialog box, click Edit Security.

In the Launch and Activation Permission dialog box, click Add.

And select the Scribe Console Users group and click OK.

And "allow" permissions to the Scribe Console Users group for Local Launch, Remote Launch, Local Activation, and Remote Activation.

Click OK.

Close the Local Security Settings dialog box.

Close the Administrative Tools dialog box.

Close Control Panel.

Reboot the TIBCO Scribe® Insight server.

On your remote machine, run the console again. You should be able to add a new site.