3

I'm trying to do a remote execution on a windows host from Linux with winexe. I get the error: ERROR: Failed to install service winexesvc - NT_STATUS_ACCESS_DENIED

The authenticated user should have administrator rights.

What exactly does this error mean and how can I get remote execution working?

housemaister
  • 133
  • 1
  • 1
  • 4

5 Answers5

4

LocalAccountTokenFilterPolicy

More info here: http://support.microsoft.com/kb/951016

Implement the LocalAccountTokenFilterPolicy registry key, as described in the KB article, and that should resolve your issue. Or you can turn off UAC, but that's not recommended.

John Homer
  • 1,313
  • 1
  • 10
  • 10
2

This fixed the error I encountered with winexe when we upgraded from Windows XP (worked) to Windows 7 (did not work):

http://help.lockergnome.com/vista/access-administrative-share-enabling-admin-accoun--ftopict25338.html

They mention Windows Vista specifically, but it works equally well for Windows 7.

1

The problem in my case was the service winexesvc was not started. By default it's been configured to start manually hence after reboot we need to start it manually or change the service properties to start it automatically.

Prakash
  • 203
  • 3
  • 8
1

The error means that the user does not have sufficient rights on the target machine. "Something" went wrong with the administrator rights for that user... Is it a Domain setup or standalone? Could you paste the winexe command line you are using (without password and/or public IP)?

PEra
  • 2,875
  • 18
  • 14
  • I played around with another machine where I have multiple user accounts; here administrator works but other users do not. What are exactly the needed rights? – housemaister Oct 07 '09 at 10:01
  • I believe that you need to have Admin rights to add a service to a computer. – mrdenny Oct 07 '09 at 15:54
  • Correct, admin rights are necessary besides some other requirements. While trying and playing around the rights got mixed up; in the described scenario, I belive, the user did not have admin rights. I found a complete list of requirements at the winexe webpage: http://eol.ovh.org/winexe/ – housemaister Oct 08 '09 at 11:37
0

The command syntax should be :- winexe -W WORKGROUP -n netbios-name -U user%pass //remote_pc_ip_address 'cmd.exe'

username should be valid user name and not the account logon name.

also check : turn on file and printer sharing turn off windows firewall disable User account settings enable NetBios over IP . from Ipv4 properties advanced settings. Also check," net share " command output , here you can check admin share is enabled or not Admin share (ADMIN$) is most important part to be enabled to run winexe .

Akshay Patil
  • 101
  • 2