Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account
Jump to bottom

Group policy for Server service prevents installation of docker desktop #12291

Closed
1 of 3 tasks
BrianFreemanAtlanta opened this issue Oct 20, 2021 · 12 comments
Closed
1 of 3 tasks

Group policy for Server service prevents installation of docker desktop #12291

BrianFreemanAtlanta opened this issue Oct 20, 2021 · 12 comments
Labels
lifecycle/locked

Comments

@BrianFreemanAtlanta
Copy link

  • I have tried with the latest version of Docker Desktop
  • I have tried disabling enabled experimental features
  • I have uploaded Diagnostics
  • Diagnostics ID:

Actual behavior

Get the following error:
[ServicePreRequisite] Failed to run prerequisite service: System.AggregateException: One or more errors occurred. ---> CommunityInstaller.Win32ExceptionWithContext: Failed to start service: Access is denied
at CommunityInstaller.Service.Manager.d__4.MoveNext()
--- End of stack trace from previous location where exception was thrown ---
at System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw()
at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)
at CommunityInstaller.ServicePreRequisite.d__14.MoveNext()
--- End of inner exception stack trace ---
at System.Threading.Tasks.Task1.GetResultCore(Boolean waitCompletionNotification) at System.Lazy1.CreateValue()
at System.Lazy`1.LazyInitValue()
at CommunityInstaller.ServicePreRequisite.get_IsFullFilled()
---> (Inner Exception #0) CommunityInstaller.Win32ExceptionWithContext (0x80004005): Failed to start service: Access is denied
at CommunityInstaller.Service.Manager.d__4.MoveNext()
--- End of stack trace from previous location where exception was thrown ---
at System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw()
at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)
at CommunityInstaller.ServicePreRequisite.d__14.MoveNext()<---
Microsoft.PowerShell.Commands.WriteErrorException
[09:30:18.893] [InstallWorkflow] Prerequisite failed: Docker Desktop requires the Server service to be enabled.

Expected behavior

Installer would see service is running and continue to install

Information

Corporate group policies sets "server" service to automatic start. General user cannot change status of the service.

  • Windows Version: Enterprise 10.0.18363 build 18363
  • Docker Desktop Version: 4.1.1
  • WSL2 or Hyper-V backend? have WSL2 installed and Hyper-V enabled
  • Are you running inside a virtualized Windows e.g. on a cloud server or a VM: N/A

Steps to reproduce the behavior

  1. Have group policy set "Server" service to automatic. User has only "Read" access to policy/service
  2. Verify user, even user with admin rights cannot change Server service run status.
  3. Install Docker Desktop - will error out - prerequisite is not fulfilled "Docker Desktop requires the server service to be enabled"
  4. chocolatey install gives detailed message
@stephen-turner
Copy link
Contributor

Docker Desktop requires the Server service, so you will have to negotiate with your IT about it.

@BaptisteLemarcis
Copy link

I have the same issue, Server service IS UP AND RUNNING as for Brian here, but Docker Desktop installer does not detected that the requirement is fulfilled and fails.

image

@stephen-turner
Copy link
Contributor

Oh, I misunderstood, the service is running but the installer doesn't detect it? That is a bug.

@BaptisteLemarcis
Copy link

Yes but my user only as read access to this service as I think it's also in a group policy. The service is up and running but maybe the readonly access right is the issue that trigger the installer to not seeing it enabled

@stephen-turner
Copy link
Contributor

Thanks, we'll look into it.

@mat007
Copy link
Member

Hi, I’m having a hard time figuring out how to configure the services in group policies (I couldn’t find much docs in a quick web search), but we’re thinking we’ve made changes to address your issue.
Here is a link to an internal build with these changes, if you wanted to try it out: https://desktop-stage.docker.com/win/main/amd64/70265/Docker%20Desktop%20Installer.exe

@LoveDuckie
Copy link

Hi, I’m having a hard time figuring out how to configure the services in group policies (I couldn’t find much docs in a quick web search), but we’re thinking we’ve made changes to address your issue. Here is a link to an internal build with these changes, if you wanted to try it out: https://desktop-stage.docker.com/win/main/amd64/70265/Docker%20Desktop%20Installer.exe

Thanks for sharing that installer @mat007

I can confirm that I was experiencing the same problem (with exact same symptoms) as the author of this issue. The installer provided does work.

@LoveDuckie
Copy link

I have the same issue, Server service IS UP AND RUNNING as for Brian here, but Docker Desktop installer does not detected that the requirement is fulfilled and fails.

image

I had the same problem as this, and the installer provided by @mat007 seems to work.

@mat007
Copy link
Member

Thanks for trying it out @LoveDuckie!
We’ll release the fix in the next Desktop version (4.2.0 is planned for Thursday the 4th of November).

@WeetA34
Copy link

Hello

FYI, the issue started with 4.1.0.
4.0.1 was ok.
In our case, Server service (lanmanserver) is managed by GPO. We only have read only perms on the service.

Regards

@joe0BAB
Copy link

Please try version 4.2.0. The problem should be fixed. Feel free to reopen if you are having further issues.

@docker-robott
Copy link
Collaborator

Closed issues are locked after 30 days of inactivity.
This helps our team focus on active issues.

If you have found a problem that seems similar to this, please open a new issue.

Send feedback to Docker Community Slack channels #docker-for-mac or #docker-for-windows.
/lifecycle locked

@docker docker locked and limited conversation to collaborators Dec 9, 2021
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Assignees
No one assigned
Labels
lifecycle/locked
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
8 participants
@LoveDuckie @mat007 @stephen-turner @BrianFreemanAtlanta @BaptisteLemarcis @WeetA34 @joe0BAB @docker-robott