in

eEye Digital Security

The endpoint to vulnerability starts here.

 
eEye Digital Security » Blink Forums » Troubleshooting » Remote Registry access denied when using good credentials

Remote Registry access denied when using good credentials

Last post 02-14-2010 6:54 PM by bpatten. 5 replies.
Page 1 of 1 (6 items)
Sort Posts: Previous Next

  • 01-11-2010 10:18 AM

    • netcsc
    • Not Ranked
    • Joined on 01-11-2010
    • Posts 1

    Remote Registry access denied when using good credentials

    Reply Contact

    Trying to run retina scan on a windows 2003 sp2 box but keep getting denied remote registry access. Credentials are fine, I have tried all of the suggestions that were given to other users with the same problem (there seems to be at least a couple of people with the exact same problem).  Local service has read access, im using and admin with retina etc etc.

     

    I'm out of Ideas, any help would be greatly appreciated.

  • 01-27-2010 1:41 PM In reply to

    Re: Remote Registry access denied when using good credentials

    Reply Contact

     I am having the same issue.  Is there anyone on this site that can help with this?

    Audit ID: 1226:  No Remote Registry Access Available

    No Remote Registry Access Available
    Audit ID: 1226
    Vul ID(s): 9852
    Category: Registry
    Description: This alert is only to notify you that Retina was not able to access the remote system's registry. Without registry access, Retina will still be able to remotely audit for vulnerabilities, although having access to the remote registry does provide Retina with the ability to verify if specific security patches are installed.

    By default the Retina scan engine runs as the SYSTEM user which has no access to the remote system's registry. To have Retina scan with the permissions required to access remote registries you'll need to add credentials to the scan. See "Managing Credentials" in the Retina users guide.

  • 01-28-2010 1:19 PM In reply to

    Re: Remote Registry access denied when using good credentials

    Reply Contact

    I am not sure if this helps but here are some ideas:  http://forums.eeye.com/forums/t/1249.aspx

  • 02-11-2010 8:11 AM In reply to

    • axelev
    • Top 500 Contributor
    • Joined on 02-11-2010
    • Posts 2

    Re: Remote Registry access denied when using good credentials

    Reply Contact

     Hi,

    experienced the same issue today. Funny - port 139 and 445 are open. Tried connecting to c$ - works. Still retina does not give me access on that w2k3 box.

  • 02-11-2010 8:38 AM In reply to

    • axelev
    • Top 500 Contributor
    • Joined on 02-11-2010
    • Posts 2

    Re: Remote Registry access denied when using good credentials

    Reply Contact

     Hi all,

     

    I did some research on the eeye forum and found this artikel http://forums.eeye.com/forums/p/1220/5326.aspx#5326. This lead to this MS artikel http://support.microsoft.com/default.aspx?scid=kb;en-us;812519.

     

    On my box the "Remote Registry" service is not started by default. Thus, I can not connect to the registry.

  • 02-14-2010 6:54 PM In reply to

    • bpatten
    • Top 10 Contributor
    • Joined on 09-24-2007
    • Irvine, CA
    • Posts 221

    Re: Remote Registry access denied when using good credentials

    Reply Contact

    Looking at the RetinaScanner log would be helpful to see whats going on. You can search for CreateRegSession to see if your credentials are working or what the error code is... like 1326 (Bad username/password).  You can lookup the error codes for CreateRegSession just by using cmd.  Use the command "net helpmsg <error number>".

Page 1 of 1 (6 items)
© 1995 - 2010 eEye Incorporated