SOTI XSight Agent on Windows Modern Disconnects with "Auth pending" Message

Publish Date: 24-Jun-2025 SOTI XSight
7 0

Summary

The SOTI XSight Agent service crashes with an "Auth pending" error. This is caused by a file permissions issue.

Related SOTI ONE Platform Products

SOTI XSight

Related Device OS

Windows Modern

Issue Description

When the SOTI XSight agent is deployed to a Windows device, the agent may fail to connect, and its status in the web console is Auth pending. The SOTI XSight service on the client device may also start and then stop, or appear to be in a frequent disconnect/reconnect cycle.

The service is repeatedly crashing due to a permission error that can be seen in the SOTI XSight Agent logs.
The log files show a System.UnauthorizedAccessException when the service attempts to access the following directory:
 
C:\Windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\Content.IE5
 
The service, which runs as the NT AUTHORITY\SYSTEM account, requires access to this folder to collect system information. Without the correct permissions, the service crashes, enters a restart loop, and is never able to establish a stable connection with the SOTI XSight server, resulting in the Auth pending status.
 

Issue Resolution

To resolve this issue, you must grant the NT AUTHORITY\SYSTEM account the correct permissions to the folder. This is done by running two commands from an elevated command prompt.

1. Open a command prompt as Administrator.

2. To grant ownership of the folder to the Administrators group, enter the following command at command prompt:

takeown /f "C:\Windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\Content.IE5" /r /d y

Note: For non-English Windows versions: If the command fails with an error stating the value for option /d is not allowed, your operating system may require a different response character. For example, Italian versions of Windows require S instead of y. If the command fails, try it again with the character appropriate for the system's language.

3. To grant the NT AUTHORITY\SYSTEM account full control over the directory, enter the following command at command prompt:

icacls "C:\Windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\Content.IE5" /grant "NT AUTHORITY\SYSTEM":(F) /t

4. Restart the SOTI XSight service.

Was this helpful?