Webcam User Manual
St.BernardSoftware,Inc. ProtectingYourNetworkInvestment
June19th,2006 UpdateEXPERTPremiumv7.01EvaluationGuide 13
AgentlessQueryRequirements
Theserequirementsaretheresultofdefaultinstall ationsforNT4/W2K/XP.Youwouldhaveto
disabletheseservicesandshares,andrestrictaccess,tofallshort oft herequirements.Inorder
toinstallOSupdatesremotelyyoumusthavetheaccessrightstoremotelyaccessandmodify
theregistryandsystemfilesonthetargetsystems.
AdministratorAccount(DomainorLocal)withadministratorrightsontargetmachines
RequiredServices,inadditiontothebaselineRPCService(ConsoleandTargetmachines):
RemoteRegistry
Server
Netlogon
FileandPrintSharing(NICconfiguration)
ShareAccess:
Admin$enabledandaccessiblebyUEaccount
IPC$shareenabledandaccessiblebyUEaccount
Adminsharesforotherdriveswhoseinstalledcomponentsmaybequeried.
RemoteRegistryAccess–"FullControl"permissiontotargetmachineregistry.
TheaccountusedforaccessmusthaveFullControlremoteaccesstot heregistryofthetarget
system.YoumustbeabletoopentheremoteregistryofthetargetsysteminREGEDT32onthe
UpdateEXPERT Console Machine. T his procedure will confirm remote registry access and
accesstoIPC$:
1) Launch REGEDT32 on the UpdateEXPERT Console Machine. Choose "RegistrySelect
Computer"andenterthenameofthetargetsystem.Inthisremoteregistry,goto:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurePipeServers\winreg
2)Withtheabovekeyhighlighted,choose"SecurityPermissions"fromthetopmenu.Youmust
beamemberofthegroupthathasFullControlaccesstothiskeyanditssubkeystosuccessfully
Queryasystem.
WindowsXP/2003RemoteL oginAccess policymustbeset to“Classic”mode:GotoStart>
Programs > Administrative Tools > Local Security Settings > Local Policies > Security
Optionsandclickthe"Networkaccess–SharingandSecurityModelforLocalAccoun ts"
item. Change the policy to the "Classic" selection. This al lows a remote login to remain
themselvesinsteadofbeingmappedtotheguestaccount.
Windows XP/SP2 tightens security. Please see t his XP/SP2 article which tells you how to
configurethefirewalltoallowqueries(ofcourse,youcanturnofft hefirewallontheclientsideif
youwish,temporarilyorpermanently).
Formoredetailontheissuesabove, clickhere.










