Plugin doesn't work if I don't logged in

[tupoybot]

I use teamcity for build my project. If I logged in on teamcity agent Windows Server 2022 Core my build works fine. But if I close RDP window, the build crashes with

hcsshim::CreateComputeSystem c83e4f625809f9b8492b73617d2d2888bf8308768c6afc9c0e49410918a681a4: winapi error #3489792023.

I see many log items about successful plugin work

TimeCreated : 11/10/2022 9:26:18 PM
ProviderName : Microsoft-Windows-Containers-CCG
Id : 2
Message : Container Credential Guard fetched gmsa credentials for service_gmsa$ using plugin:
{DEFFF03C-3245-465F-8391-CC586A2D1F32}.

TimeCreated : 11/10/2022 9:26:18 PM
ProviderName : Microsoft-Windows-Containers-CCG
Id : 2
Message : Container Credential Guard fetched gmsa credentials for service_gmsa$ using plugin:
{DEFFF03C-3245-465F-8391-CC586A2D1F32}.

But after I close RDP I see

TimeCreated : 11/10/2022 9:29:44 PM
ProviderName : Microsoft-Windows-Containers-CCG
Id : 4
Message : Container Credential Guard failed to instantiate the plugin: {DEFFF03C-3245-465F-8391-CC586A2D1F32}.
Error: The server process could not be started because the configured identity is incorrect. Check the
username and password.

[ChrisKlug]

The reason is probably that the COM-component is registered to run as a the currently logged in user in Windows. Try changing it to run as NETWORK SERVICE LOCAL SYSTEM.

[tupoybot]

How I can do it?
I register this component via automated script which run by teamcity user. docker build I also run by teamcity

[ChrisKlug]

You need to go to "Component Services" > Computers > My Computer > COM+ Applications > "Your component" > Properties > Identity.
Or

$comAdmin = New-Object -comobject COMAdmin.COMAdminCatalog
$apps = $comAdmin.GetCollection("Applications")
$apps.Populate()
$app = $apps | Where-Object {$_.Name -eq "<PLUGIN NAME>"}
$app.Value("Identity") = "NT AUTHORITY\NetworkService"
$apps.SaveChanges()

[tupoybot]

Thank you!
I'll try

[tupoybot]

it seems work!

[macsux]

Awesome. Enjoy

[tupoybot]

What about include this article to readme?

[macsux]

Feel free to submit a PR

…

On Mon., Dec. 5, 2022, 10:34 a.m. tupoybot, ***@***.***> wrote: What about include this article to readme? — Reply to this email directly, view it on GitHub <#1 (comment)>, or unsubscribe <https://github.com/notifications/unsubscribe-auth/AAINFWH6YYIMSUXAQCIVPQDWLYDSFANCNFSM6AAAAAAR43VF7A> . You are receiving this because you commented.Message ID: ***@***.***>