Group policy for Server service prevents installation of docker desktop

[BrianFreemanAtlanta]

• I have tried with the latest version of Docker Desktop
• I have tried disabling enabled experimental features
• I have uploaded Diagnostics
• Diagnostics ID:

Actual behavior

Get the following error:
[ServicePreRequisite] Failed to run prerequisite service: System.AggregateException: One or more errors occurred. ---> CommunityInstaller.Win32ExceptionWithContext: Failed to start service: Access is denied
at CommunityInstaller.Service.Manager.d__4.MoveNext()
--- End of stack trace from previous location where exception was thrown ---
at System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw()
at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)
at CommunityInstaller.ServicePreRequisite.d__14.MoveNext()
--- End of inner exception stack trace ---
at System.Threading.Tasks.Task1.GetResultCore(Boolean waitCompletionNotification) at System.Lazy1.CreateValue()
at System.Lazy`1.LazyInitValue()
at CommunityInstaller.ServicePreRequisite.get_IsFullFilled()
---> (Inner Exception #0) CommunityInstaller.Win32ExceptionWithContext (0x80004005): Failed to start service: Access is denied
at CommunityInstaller.Service.Manager.d__4.MoveNext()
--- End of stack trace from previous location where exception was thrown ---
at System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw()
at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)
at CommunityInstaller.ServicePreRequisite.d__14.MoveNext()<---
Microsoft.PowerShell.Commands.WriteErrorException
[09:30:18.893] [InstallWorkflow] Prerequisite failed: Docker Desktop requires the Server service to be enabled.

Expected behavior

Installer would see service is running and continue to install

Information

Corporate group policies sets "server" service to automatic start. General user cannot change status of the service.

• Windows Version: Enterprise 10.0.18363 build 18363
• Docker Desktop Version: 4.1.1
• WSL2 or Hyper-V backend? have WSL2 installed and Hyper-V enabled
• Are you running inside a virtualized Windows e.g. on a cloud server or a VM: N/A

Steps to reproduce the behavior

1. Have group policy set "Server" service to automatic. User has only "Read" access to policy/service
2. Verify user, even user with admin rights cannot change Server service run status.
3. Install Docker Desktop - will error out - prerequisite is not fulfilled "Docker Desktop requires the server service to be enabled"
4. chocolatey install gives detailed message

[stephen-turner]

Docker Desktop requires the Server service, so you will have to negotiate with your IT about it.

[BaptisteLemarcis]

I have the same issue, Server service IS UP AND RUNNING as for Brian here, but Docker Desktop installer does not detected that the requirement is fulfilled and fails.

[stephen-turner]

Oh, I misunderstood, the service is running but the installer doesn't detect it? That is a bug.

[BaptisteLemarcis]

Yes but my user only as read access to this service as I think it's also in a group policy. The service is up and running but maybe the readonly access right is the issue that trigger the installer to not seeing it enabled

[stephen-turner]

Thanks, we'll look into it.

[mat007]

Hi, I’m having a hard time figuring out how to configure the services in group policies (I couldn’t find much docs in a quick web search), but we’re thinking we’ve made changes to address your issue.
Here is a link to an internal build with these changes, if you wanted to try it out: https://desktop-stage.docker.com/win/main/amd64/70265/Docker%20Desktop%20Installer.exe

[LoveDuckie]

Hi, I’m having a hard time figuring out how to configure the services in group policies (I couldn’t find much docs in a quick web search), but we’re thinking we’ve made changes to address your issue. Here is a link to an internal build with these changes, if you wanted to try it out: https://desktop-stage.docker.com/win/main/amd64/70265/Docker%20Desktop%20Installer.exe

Thanks for sharing that installer @mat007

I can confirm that I was experiencing the same problem (with exact same symptoms) as the author of this issue. The installer provided does work.

[LoveDuckie]

I have the same issue, Server service IS UP AND RUNNING as for Brian here, but Docker Desktop installer does not detected that the requirement is fulfilled and fails.

I had the same problem as this, and the installer provided by @mat007 seems to work.

[mat007]

Thanks for trying it out @LoveDuckie!
We’ll release the fix in the next Desktop version (4.2.0 is planned for Thursday the 4th of November).

[WeetA34]

Hello

FYI, the issue started with 4.1.0.
4.0.1 was ok.
In our case, Server service (lanmanserver) is managed by GPO. We only have read only perms on the service.

Regards

[joe0BAB]

Please try version 4.2.0. The problem should be fixed. Feel free to reopen if you are having further issues.

[docker-robott]

Closed issues are locked after 30 days of inactivity.
This helps our team focus on active issues.

If you have found a problem that seems similar to this, please open a new issue.

Send feedback to Docker Community Slack channels #docker-for-mac or #docker-for-windows.
/lifecycle locked