Overview

When trying to install Archiver while logged in as a domain admin/user account and choosing the GFI Directory option, the installation of GFI Directory may complete successfully, but the creation of the default GFI Directory Administrator account fails silently in the background. This can lead to login issues when trying to use products that rely on GFI Directory. If the tool CreateDefaultAdminUser.exe is run manually, the error "Process failed: System.ServiceModel.FaultException: NotLocalAdministrator" will appear. This error occurs because the process requires a local administrator account that is not part of the domain's Active Directory.

Solution

To resolve the issue of failing to create the default GFI Directory Administrator user, follow these steps:

1. Use a local administrator account that is not part of the domain Active Directory:

   • GFI Directory requires a local administrator account that is not linked to the domain's Active Directory for creating the default GFI Directory Administrator user.
   • Ensure that a local administrator account is created and logged in outside the domain environment.

2. Manually create a local administrator account:

   • Open the Local Users and Groups management console by typing lusrmgr.msc in the Run prompt.
   • Create a new local administrator user on the machine.
   • Log in using this new local administrator account to proceed with GFI Directory administration.

3. Verify the creation using the CreateDefaultAdminUser tool:

   • Once logged in with the local administrator account, manually run the following tool from an elevated command prompt:

     C:\Program Files\GFIDirectory\Tools\DefaultAdministrator\CreateDefaultAdminUser.exe
     
   • This tool will attempt to create the default GFI Directory Administrator user. Running it under a local administrator account should prevent the "NotLocalAdministrator" error.

4. Alternative setup on a non-domain machine:

   • If creating a local administrator account on a domain-joined machine is not possible, install GFI Directory on a non-domain-joined machine (a workgroup machine). This can bypass Active Directory restrictions.

Products that use GFI Directory should also be accessed using the local administrator account created during this process.

Relevant Documentation

GFI Directory Manual