...
| Code Block |
|---|
\HKEY_USERS\.DEFAULT\Software\Microsoft\Windows Script\Settings |
Enabling the Administrator account on non-Domained machines
Open a command prompt with administrative rights (Windows key, type 'cmd' (sans quotes) right click Command Prompt and select Run as Administrator.
In the command window type
| Code Block | ||
|---|---|---|
| ||
net user Administrator |
You should see Active set to false. Enable it with
| Code Block | ||
|---|---|---|
| ||
net user Administrator /active:yes |
Then run the first command again and confirm Active is now set. Then set the password with:
| Code Block | ||
|---|---|---|
| ||
net user Administrator * |
And type 'exit' to close the window.
Windows 7 and 2008 R2 not submitting audit using HTTPS
...
If the response is: Description: Access denied Facility = WMI then the credentials that were supplied don't have WMI Security permissions on the Target machine.
Matching Discovery Logs to WMI issues
on the Target machine.
Matching Discovery Logs to WMI issues
If you see the below, try the following fixes.
ERROR: Failed to open connection - NT_STATUS_LOGON_FAILURE
Check your credentials and that they are of a machine Administrator account.
ERROR: Failed to open connection - NT_STATUS_CONNECTION_RESET
Likely from our attempt to use SMB1, which the target Windows PC no longer acceptsIf you see the below, the the following fixes.
ERROR: Failed to save ADMIN$/winexesvc.exe
...
- NT_STATUS_ACCESS_DENIED.
Is Are the ADMIN$ share and IPC$ shares enabled? Check as below.
ERROR: UploadService failed
...
- NT_STATUS_ACCESS_DENIED.
Is Are the ADMIN$ share and IPC$ shares enabled? Check as below.
ERROR: Failed to install service winexesvc - NT_STATUS_ACCESS_DENIED
This most likely means the user account being used does not have sufficient rights on the target machine. To fix this issue, see the section above on this page for UAC.
ERROR: StartService Failed
...
- NT_STATUS_ACCESS_DENIED
We are still investigating possible causes for this issue. It appears that the winexesvc.exe file has been copied to the target and the service registered, however it fails to start. This may be Antivirus related. We are unsure at this stage.
...