Enterprise Cloud Builder for Azure 11.3 Upgrading from 10.9.1. An error occurs when accessing the network share with the specified credential

[DrewCover]

Using Cloudbuilder 11.3 to upgrade our enterprise base deployment on Azure.  I keep running into a network share error; 

"Execution of DSC run command failed. The specified network password is not correct. An error occurs when accessing the network share with the specified
credential. Please make sure the credential is correct and the network share is accessible. Note that Credential
should not be specified with the local path. The related file/directory is:
\\g1sUpgradeVM\UpgradeSetups\Portal\PortalforArcGIS.exe.
+ CategoryInfo : NotSpecified: (:) [], CimException
+ FullyQualifiedErrorId : Windows System Error 86
+ PSComputerName : localhost

The SendConfigurationApply function did not succeed.
+ CategoryInfo : NotSpecified: (root/Microsoft/...gurationManager:String) [], CimException
+ FullyQualifiedErrorId : MI RESULT 1
+ PSComputerName : localhost

C:\Packages\Plugins\Microsoft.CPlat.Core.RunCommandHandlerWindows\2.0.11\Downloads\Script_DSCConfigRunCMD_3.ps1 : DSC
Job failed to complete. Please check the logs"

Full log is attached.  Very sure all my credentials are the same from the previous install.  Thought it might be the Windows VM advanced share settings; so I turned on network discovery and turned off password protected sharing for all instances temporarily but hit the same error. 

Now I'm wondering if its related to an Azure Multi-Factor Authentication change from 15 October 2024 where all users must go through MFA to sign into Azure Portal.... is the arcgis user hitting the MFA security layer when trying to talk between machines in Azure Cloudbuilder?  

Any one have a similar problem?  Is there a solution if it is MFA?  Will Cloud Builder Azure 11.4 step around this?

[TimoT]

Hi @DrewCover,

I ran into the same error around 1 year ago and never resolved it. Here's some of the things I tried:

1. Used Powershell to verify that the Portal VM could read and write to the directory with the Portal service account.
2. Confirmed the local service account credentials were the same on both the Portal VM and the UpgradeVM that CloudBuilder creates.
3. Turned on network discovery and turned off password protected sharing on both the Portal VM and the UpgradeVM (g1sUpgradeVM in your case)
4. Logged into the upgradeVM and set full control permissions for "Everyone" on the directory in the error logs.

That being said, I did not expect the upgrade to work. This deployment was originally built in Cloud Builder but had the Portal for ArcGIS software uninstalled and reinstalled under Esri's guidance to address a separate issue. I suspect this reinstall disrupted Cloud Builder’s ability to upgrade. While I could have likely restored  Cloud Builder upgrade functionality with more effort, it didn’t seem worth the time investment.

Note that I have multiple other deployments that upgraded perfectly fine via CloudBuilder without having to do anything extra.

Are you aware of any significant changes to the Portal for ArcGIS software or any of the associated Azure resources?