2 replies to this topic

[TACHC_IT]

Hello, I was hopeful that the Netwrix Bulk Password Reset could help us update our local domain's Windows 7 machine's admin account. I'd manually created this user on each laptop (<30) when setting up each machine, but we'd now like to periodly reset it for security purposes. 

 

Although I was able to reset the password on my laptop, I get 'Access is Denied' on any other laptop in the domain, including one without Anti-virus and with its firewall off and UAC settings all the way off. 

 

The progress window reads:

Reseting password for account "Manager"

\\laptop2.tachc.org: Access is denied.

Operation completed.

You can select Reprocess from the main menu to process computers that have the "Failed" status.

 

I am a domain admin, but I even went so far as to use the actual domain administrator account and still no luck. I'm using just the account name in the 'Account Name' box, not domainname\accountname. 

I've made sure that the RPC and Remote Registry Services are running. I'm changing the password to a complexity-compliant version and every time, I get Access is denied and the logs read "Scheduled Task was disabled'. 

 

BPR.exe Information: 0 : [TID: 1, Time: 7/14/2015 4:14:08 PM] Tracing started. OS version: Microsoft Windows NT 6.1.7601 Service Pack 1, Username: TACHC\jdavidson, Interactive: True, CPU count: 8, CLR version: 2.0.50727.5485, Assembly File version: 2.0.28.0

BPR.exe Information: 0 : [TID: 1, Time: 7/14/2015 4:14:08 PM] 

BPR.exe Information: 0 : [TID: 1, Time: 7/14/2015 4:14:08 PM] 

BPR.exe Information: 0 : [TID: 1, Time: 7/14/2015 4:14:08 PM] Program start in common mode.

BPR.exe Information: 0 : [TID: 1, Time: 7/14/2015 4:14:21 PM] Scheduled task was disabled.

BPR.exe Information: 0 : [TID: 1, Time: 7/14/2015 4:14:21 PM] Operation start.

BPR.exe Information: 0 : [TID: 1, Time: 7/14/2015 4:14:21 PM] Operation finished.

BPR.exe Information: 0 : [TID: 1, Time: 7/14/2015 4:14:41 PM] Scheduled task was disabled.

BPR.exe Information: 0 : [TID: 1, Time: 7/14/2015 4:14:41 PM] Operation start.

BPR.exe Information: 0 : [TID: 1, Time: 7/14/2015 4:14:41 PM] Operation finished.

BPR.exe Information: 0 : [TID: 1, Time: 7/14/2015 4:16:10 PM] Scheduled task was disabled.

BPR.exe Information: 0 : [TID: 1, Time: 7/14/2015 4:16:10 PM] Operation start.

BPR.exe Information: 0 : [TID: 1, Time: 7/14/2015 4:16:10 PM] Operation finished.

BPR.exe Information: 0 : [TID: 1, Time: 7/14/2015 4:16:23 PM] Scheduled task was disabled.

BPR.exe Information: 0 : [TID: 1, Time: 7/14/2015 4:16:23 PM] Operation start.

BPR.exe Information: 0 : [TID: 1, Time: 7/14/2015 4:16:23 PM] Operation finished.

 

Any ideas as to why this continues to fail?  Thanks!

[jeffb]

TACHC_IT,

 

The scheduled task gets disabled because the product run's ad-hoc by default unless you tell it to run every X hours.  So the scheduled task gets disabled so it cannot run on it's own.  This is normal.

 

As to the access denied I was able to reproduce this issue on a remote machine and any domain credential caused an access denied.  I was able to use local admin credentials on the machine to change other credentials (including it's own).  So as long as you know the current local admin credentials you could technically use the account that is being reset to reset itself.  When I disabled UAC on the target machine and rebooted it I was able to use domain credentials.

 

-Jeff

[TACHC_IT]

Thanks Jeff,

     I discovered that after I'd entered my credentials (I'm a domain admin) and then unchecked 'Specify the administrator's credentials, the resets proceeded normally. Strange, but it works!