问题
When running the psexec command to remotely install or execute something on a sever on the same network the following error was displayed.
Couldn't access ServerName
The network name cannot be found
Make sure that the default admin$ share is enable on ServerName
Most references suggested that you add the following to the registry, but in my case this was already added to the server. This did not resolve the issue.
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System and create or modify a REG_DWORD value LocalAccountTokenFilterPolicy and set its value to 1
回答1:
Solution:
You need to add the 'admin$' share which is your C:\Windows location.
- Go to
C:\windows
and right-click -->Properties
- Hit
advance sharing
- Click the check box
Share this folder
- Enter the name
admin$
and hit Permissions - I would recommend removing 'Everyone' and adding just the users that the PsExec command will use to execute.
Run the PsExec command again and this should resolve your issue.
Edit:
You can also turn on your AutoShareServer in the registry, which will automatically create the admin shares.
- Start regisry
regedit
- Search for key
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\LanmanServer\Parameters\AutoShareServer
- Change the
AutoShareServer
key to1
回答2:
In my case it was a network problem like mentioned in the error message.
I needed to allow SMB traffic on port 445 on the target machine. PSExec worked straight away after adding the firewall rule to allow that traffic.
回答3:
You can also enable amins$ share by enabling File and Printer Sharing (SMB-In) Firewall Rule.
Go to Control Panel > System ans Security > Windows Defender Firewall > Advance Settings > Inbound Rules
. Right click on File and Printer Sharing (SMB-In) from the list and select Enable Rule`. Normally, there are two File and Printer Sharing (SMB-In), one is for Domain profile and one is for Public & Private profile. I'm not sure which profile should be applied, Domain or Public or Private. For me, it's Domain profile.
来源:https://stackoverflow.com/questions/18388381/make-sure-that-the-default-admin-share-is-enable-on-servername