GAM7 install: [WinError 10054] when running "gam create project"

[Daniel Fisher]

Recently did a fresh install of Win 11 and decided to install GAM7 with it.  (I had forgotten to pull my GAM/GAMADV files from the Win 10 load, thus the fresh install of GAM7)  Everything was working perfectly fine on Win 10 and there have been no changes to anything in our network.  

I have verified the GAM Project Creation API is Trusted.  I have verified that I still have privileges to create projects in console.cloud.google.com.  

During the install, when I run the command 'gam create project' I get this after the authorization window appears and I click Allow (full output):

#####
C:\gam7>gam create project
WARNING: Config File: C:\gamconfig\gam.cfg, Section: DEFAULT, Item: oauth2_txt, Value: C:\gamconfig\oauth2.txt, Not Found
WARNING: Config File: C:\gamconfig\gam.cfg, Section: DEFAULT, Item: oauth2service_json, Value: C:\gamconfig\oauth2service.json, Not Found

It's important to mark the GAM Project Creation Client ID as trusted by your Workspace instance.

Please go to:

  https://admin.google.com/ac/owl/list?tab=configuredApps

1. Click on: Configure new app
2. Enter the following Client ID value in Search for app:

  297408095146-fug707qsjv4ikron0hugpevbrjhkmsk7.apps.googleusercontent.com

3. Press Search, select the GAM Project Creation app, click
4. Keep the default scope or select a preferred scope that includes your GAM admin.
5. Press Continue
6. Select Trusted radio button, press Continue and Finish.
7. Press Confirm if Confirm parental consent pops up
8. Press enter here on the terminal once trust is complete.


Enter your Google Workspace admin or GCP project manager email address authorized to manage project(s): gam-project-u1tr9? fish...@cs.org

Go to the following link in a browser on this computer or on another computer:

    https://accounts.google.com/o/oauth2/v2/auth?response_type=code&client_id=297408095146-fug707qsjv4ikron0hugpevbrjhkmsk7.apps.googleusercontent.com&redirect_uri=http%3A%2F%2F127.0.0.1%3A8080%2F&scope=https%3A%2F%2Fwww.googleapis.com%2Fauth%2Fcloud-platform&state=Y9hIN8eAFePhf2iwkPTukLllcFt339&code_challenge=44YJwYdum8rNQiZkQgYeDKSAZaoNO3-D45D5FswPdag&code_challenge_method=S256&access_type=online&open_browser=True&login_hint=fisherd1%40cs.org

If you use a browser on another computer, you will get a browser error that the site can't be reached AFTER you
click the Allow button, paste "Unable to connect" URL from other computer (only URL data up to &scope required):

Enter verification code or paste "Unable to connect" URL from other computer (only URL data up to &scope required): 127.0.0.1 - - [16/Oct/2025 08:57:48] "GET /?state=Y9hIN8eAFePhf2iwkPTukLllcFt339&code=4/0AVGzR1Bf-_xkM-vovglV_khxAoWjupb4NL18wIp1V8o-SZ1H9o75GehDJZghd9rFaoY6fw&scope=https://www.googleapis.com/auth/cloud-platform HTTP/1.1" 200 91

The authentication flow has completed.

ERROR: [WinError 10054] An existing connection was forcibly closed by the remote host
#####

I have also tried disabling all of Windows Firewall settings and UAC controls.  Are there other Win 11 settings that could be affecting this, or anything in general to try?
 

This e-mail message, including any attachments, is intended only for the use of the individual or entity to which it is addressed and may contain information that is privileged and/or confidential. If you are not the intended recipient or the employee or agent responsible for delivering the communication to the intended recipient, please notify us immediately by replying to this message and then delete this message from your system. You are hereby notified that any use, dissemination, distribution and/or reproduction of this message and/or any attachments by unintended recipients is unauthorized and may be unlawful.

[Ross Scroggs]

Send me a Meet/Zoom invitation now and I'll help.

Ross

----

Ross Scroggs

Ross.S...@gmail.com

--
You received this message because you are subscribed to the Google Groups "GAM for Google Workspace" group.
To unsubscribe from this group and stop receiving emails from it, send an email to google-apps-man...@googlegroups.com.
To view this discussion visit https://groups.google.com/d/msgid/google-apps-manager/8f6bb2d6-976d-4db2-a52e-60ab572b13bfn%40googlegroups.com.

[Daniel Fisher]

Thanks again Ross for checking things over with me.  In working with our Network Engineer, we did find that while our Palo was allowing the traffic, it's strict enforcement of SSL saw it as potentially malicious and applied a deny rule to it.  

Unsure why switching to Win11 changed this, but will begin testing on some of our test servers to see if anything is different from one of those.