CF2018 lockdown tool fails to change the logon users

[henwilli]

Greetings, We've been struggling with this for a few days so I thought I'd seek some help. We are continually receiving the following error, causing the lockdown tool to rollback all its settings:

"Failed to change the logon users for ColdFusion services!"

Has anyone else seen this?

Thanks,

Henry

[Sandip_halder]

Hi Henry,

The user that you are trying to add, is it already created or are you using the lockdown tool to create the user?

Thanks

Sandip

[henwilli]

Hi Sandip,

We have tried both with the same result.

Henry

[DKWilliams]

Originally I got that message when it was trying to change  the user to start the service.  When I created the user cfuser locally and gave it permission to run the service, then we got past the part about changing the logon user for the service.

Proper permissions granted to the said user for starting the ColdFusion services!

Then it hits the registry changes and says that the user doesn't have permission and rolls everything back:

2018-09-11 13:48:15 INFO  - Failed to change the logon users for ColdFusion services!

2018-09-11 13:48:15 INFO  - Rolling back the changes because of the Lockdown failure

2018-09-11 13:48:15 INFO  - Reverting back the registry permissions changed during Lockdown

[bihani]

Hi Henry,

Can you recheck your domain name/password associated with the user you created? Both the user service logon and registry permissions might happen because of this issue. These values need to be given correctly in the screen where we ask for the ColdFusion runtime user.

This will generally happen if domain name is incorrect.

Also, is it possible to share the logs at bihani@adobe.com? I'll check and get back to you.

Thanks,

Kailash

[DKWilliams]

We have taken the domain problem out of the equation completely by creating a new VM that isn't part of any domain.  We are using the local admin account on the server and we are sure that the information is correct. It shows the machine name as the domain, which should be correct.  We also simplified the ColdFusion password to make sure there weren't any issues there - in another post someone mentioned special characters being an issue.  We have tried creating the cfuser account ourselves and letting the system create it. 

I have zipped and emailed the logs.

[Clever_difference15B9]

Having the same issue

Here's the section of the log that prior to rollback:

2019-01-17 21:44:35 INFO  - Failed to change the logon users for ColdFusion services!

2019-01-17 21:44:35 INFO  - Rolling back the changes because of the Lockdown failure

2019-01-17 21:44:35 INFO  - Reverting back the registry permissions changed during Lockdown

Was there every a solution to this issue ?