Unable to uninstall or upgrade agents from SCOM Console

Fadil Ck 381 Reputation points

Hi All,

I am using SCOM 2019. I am unable to uninstall, upgrade or add Windows agents through Operations manager console. We installed the agents through SCCM. Does SCOM Action account require local admin access on each agents for remote installation/uninstallation? Do we need to add the Action account to any Run as profiles? Even if I use my admin domain account still the agents fails to uninstall/upgrade. Have attached error SS.

Thanks in advance
Fadil CK


Operations Manager
Operations Manager
A family of System Center products that provide infrastructure monitoring, help ensure the predictable performance and availability of vital applications, and offer comprehensive monitoring for datacenters and cloud, both private and public.
1,444 questions
0 comments No comments
{count} votes

Accepted answer
  1. George Moise 2,351 Reputation points Microsoft Employee

    Hello @Fadil Ck ,

    There are three main things you need to make sure:

    1 - Since you have deployed your agents with SCCM, you need to make sure that you have the required TCP Ports opened to allow a push uninstall / upgrade / install for agents from the SCOM Management Server (source here):


    2- The agents you deployed through SCCM are considered - Manual Installed Agents by SCOM (by default), after you verified step 1 above, you can follow this article to configure the agents to be remotely manageable from SCOM Console.

    3 - Since you're using SCOM 2019, you must be aware of the major security change where any account running a SCOM initiated workflow on a Server / Agent requires now to have Log on as a Service permissions on that Operating System (vs the Allow Log on Locally required in earlier versions of SCOM). --> not having this could generate an access denied error.
    Check more info on this article.

    Note: you should be able to find more details about the Agent push installation process if you check on the SCOM Management Server, in the SCOM installation path (by default C:\Program Files\Microsoft System Center\Operations Manager) in the \AgentManagement\AgentLogs folder, and you should have a log file with the Agent Name for the agents you tried to push. That log file should provide more info.

    I hope the above helps!

    1 person found this answer helpful.
    0 comments No comments

0 additional answers

Sort by: Most helpful