PsExec Access is denied
Rise to the top 3% as a developer or hire one of them at Toptal: https://topt.al/25cXVn
--------------------------------------------------
Music by Eric Matyas
https://www.soundimage.org
Track title: Riding Sky Waves v001
--
Chapters
00:00 Psexec Access Is Denied
00:43 Answer 1 Score 12
01:12 Answer 2 Score 6
01:58 Accepted Answer Score 2
02:21 Answer 4 Score 0
02:43 Thank you
--
Full question
https://superuser.com/questions/540380/p...
--
Content licensed under CC BY-SA
https://meta.stackexchange.com/help/lice...
--
Tags
#windows7 #runas #psexec
#avk47
ANSWER 1
Score 12
On Windows Vista and later, if UAC is enabled, a process launched by psexec
-- even when run from an administrator account -- must have its elevate token set in order to get full privileges. This can be done by passing the -h
attribute in the psexec
command line. So, you would change your command to:
psexec -h -u wsadmin -p password cmd
For more info, run psexec /?
:
-h If the target system is Vista or higher, has the process
run with the account's elevated token, if available.
ANSWER 2
Score 6
It took me hours to find a working way to PsExec
between two Windows 7 Computers with non-Admin user starting PsExec
... Disabling UAC (EnableLUA=0
, ConsentPromptBehaviorAdmin=0
, LocalAccountTokenFilterPolicy=1
) did not work, turning off the Firewalls did not work...
Here I found the working way - thanks JelmerS: (Info from PSexec is not connecting to machine using supplied username and password)
This is because psexec
still tries to access the ADMIN$
share with your local credentials, before executing your command as another user. According to this thread, you can cache credentials before executing psexec:
cmdkey.exe /add:MACHINE_NAME_HERE /user:MACHINE_NAME_HERE\Administrator /pass:PASSWORD_HERE
psexec.exe \\MACHINE_NAME_HERE -i notepad
cmdkey.exe /delete:MACHINE_NAME_HERE
ACCEPTED ANSWER
Score 2
I have found a solution:
Turns out that when you have UAC enabled psexec does not work as supposed.
Whenever HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA
is set to 0
psexec works as expected.
ANSWER 4
Score 0
Here is what worked for me, it doesn't get rid of UAC completely but turns it off for administrators
Computer Configuration\Windows Settings\Security Settings\Local Policies\Security Options\User Account Control:Run All Administrators in Admin Approval Mode - Disabled