When deploying FusionCloud solution, the tomcat account password is configured as expiring each 3 months. When the password expires, tomcat service can not on normally, and FusionAccess portal can not connect in, after change the password in ITA server, but still have problem to create new VM:
1. Check ITA server vdesktop log:
[VDESKTOP][ITA-TID-30152321756-save]checkAccountExist errorInfo: Winrs error:Access is denied.
[VDESKTOP][ITA-TID-30152321756-save]cmd /c chcp 437 && winrs -r:172.16.32.41 -u:virtualadm\ITAServiceUser -p:*** -nop net localgroup "administradores" /add "virtualadm\00000000493"
[VDESKTOP][ITA-TID-30152321756-save]addUserOrGroupToVMRole line:Active code page: 437
[VDESKTOP][ITA-TID-30152321756-save]Active Code Page: 437, ignore it.
[VDESKTOP][ITA-TID-30152321756-save]addUserOrGroupToVMRole errorInfo: Winrs error:Access is denied.
[VDESKTOP][ITA-TID-30152321756-save]winrm exec error.
[VDESKTOP][ITA-TID-30152321756-save]Failed to addUserOrGroupToVMRole, user[virtualadm\00000000493].
2. Since the OS image is Spanish version, so according to ITA error, we checked the spell of administrator in Spanish is correct or not.
English: administrator Spanish:administrador English:user Spanish:usuario
And customer input right Spanish administrator
3. This error 'Winrs error:Access is denied' is also can be caused by abnormal tomcat account.
So check with customer, and know that they changed password of Tomcat in ITA server, because it prompted customer the password would expire.
After changed password in ITA, customer didn't update password in FusionAccess, so we ensured that was the reason to this failure.
4. Stop tomcat service in ITA server, and update new password in tomcat console. And then login FusionAccess portal, and update tomcat password in system configuration page.(Have to update password in both ITA server and FusionAccess)
After above operations, entire system return normal.
When deploying FusionCloud solution, for all VDI domain account, if customer doesn't ask, I recommend to configure those account as password never expires. And explain why we do like that to customer.