Document Version1.6

Date: 2020-08-31


Copyright

© 2021 Outpost24® All rights reserved. This document may only be redistributed unedited and unaltered. This document may be cited and referenced only if clearly crediting Outpost24® and this document as the source. Any other reproduction and redistribution in print or electronically is strictly prohibited without explicit permission.

Trademark

Outpost24® and OUTSCAN™ are trademarks of Outpost24® in Sweden and other countries.



Introduction

This document provides users with a comprehensive overview of Windows configuration required to succeed with authenticated scans using OUTSCAN or HIAB. This document has been elaborated under the assumption the reader has access to the OUTSCAN/HIAB account and Portal Interface.


Prerequisites

If another account than Domain Administrator is used, it needs to either be a Domain User Account or a local user part of the AdministratorGroup to succeed with the authentication. If a Domain User Account is used, it need to be a member of the Administrators group, this user will run with full administrator access enabled, therefore User Account Control (UAC) does not need to be disabled. If a Local User is used ensure that the local account is included in the Administrators Group.

Authenticated Scanning 

This guide provides you with the technical procedure to succeed with authenticated scanning for Windows targets when using OUTSCAN or HIAB.

This document covers procedure for:


Note

When performing authenticated scanning against windows hosts, the scanner creates and starts a service called O24 Auth on the target machine.
This service is used to execute commands on the target and send the results back to the scanner.
Do not remove the service during scanning, it will stop and remove itself after it is done.

Note

Authenticated Scanning Using SMB requires .NET framework version 3.5 or higher.



Windows 7 

To succeed with authenticated scanning using SMB for Windows 7 targets, follow the procedure below.

Caution

The following steps are only applicable for Windows 7 Pro or higher, NOT Windows 7 Home.

Step 1 - Enable Remote Registry

To enable Remote Registry (optional, can also be configured within the scanner):

  1. Go to Start and enter Run in the search field to open the Run Prompt.

  2. Open Services by enter services.msc in the Run Prompt and click OK

    Note

    If Remote Registry is already enabled on your device, go to Step 2.




  3. Under Services (Local), right click Remote Registry and select Properties.

  4. In Remote Registry Properties (Local Computer), change the Startup Type to Automatic and start the service.



Step 2 - File and Printer Sharing

To turn on File and Printer Sharing:

  1. Go to Start and enter Network and Sharing Center into the search field to open Network and Sharing Center.
  2. In Network and Sharing Center, go to Change advanced sharing settings, located on the left-hand side.
  3. In your current profile, Private/Guest or Public, select Turn on file and printer sharing.
  4. Click Save Changes.


Step 3 - Administrator Rights
  1. Go to Start and enter mmc in the search field to access Microsoft Management Console.

  2. Select Local Users and Groups, located in the left pane of the Microsoft Management Console window.

    If Local Users and Groups is not listed:

    1. Go to the File menu of the Console window
    2. Select Add/Remove Snap-in.
    3. Select Local Users and Groups
    4. Click Add
    5. Select Local Computer
    6. Click Finish
    7. Click Ok
  3. Enter the Groups folder and double click the Administrators group.

    If the account is not listed under Members:

    1. Click Add
    2. Enter the name of the already created account that you wish to add
    3. Click Check Names
    4. Click Ok
    5. Click Ok




Note

The following step are not recommended, if possible use the domain user account.


Make sure that the Windows User Account Control (UAC) is disabled.

  1. Go to Start and enter Run in the search field to open the Run Prompt.

  2. In the run prompt enter regedit and click OK to open the Registry Editor.

  3. Navigate to HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\system.
  4. Right click the System Folder.
  5. Choose New >> DWORD (32-bit) Value and name the DWORD LocalAccountTokenFilterPolicy.
  6. Right click the newly created DWORD and choose Modify.
  7. In the Edit Window set Value Data to 1.
  8. If User Account Control is disabled, EnableLUA must be set to 0 in 
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System


Step 4 - Memory Leak in the Remote Registry Service

To resolve the Memory Leak in the Remote Registry Service:

  1. Go to Start and enter Run in the search field to open the Run Prompt.

  2. In the Run Prompt enter regedit and click Ok to open the Registry Editor.

  3. Locate the following registry sub key: 
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsNT\CurrentVersion\RemoteRegistry
  4. In the details pane, on the right-hand side, double-click DisableIdleStop.
  5. Change the value to 00000001



Windows 8.1 

Step 1 - Enable Remote Registry

To enable Remote Registry (Optional, can also be configured within the scanner):

  1. Go to Start and enter Run in the search field to open the Run Prompt.

  2. Open Services by enter services.msc in the Run Prompt and click OK.

  3. Under Services (Local), right click Remote Registry and select Properties.

    Note

    If Remote Registry is already enabled on your device, skip to Step 2.

  4. In Remote Registry Properties (Local Computer), change the Startup Type to Automatic and start the service.


Step 2 - File and Printer Sharing

To turn on File and Printer Sharing:

  1. Go to Start and enter Network and Sharing Center into the search field to open Network and Sharing Center.

  2. In Network and Sharing Center, go to Change advanced sharing settings, located on the left-hand side.

  3. In your current profile, Private/Guest or Public, select Turn ON file and printer sharing.
  4. Click Save Changes.


Step 3 - Administrator Rights

  1. Go to Start and enter mmc in the search field to access Microsoft Management Console.

  2. Select Local Users and Groups, located in the left pane of the Microsoft Management Console window.

    If Local Users and Groups is not listed:

    1. Click the File menu
    2. Select Add/Remove Snap-in
    3. Select Local Users and Groups
    4. Click Add
    5. Select Local Computer
    6. Click Finish
    7. Click Ok
  3. Enter the Groups folder and double click the Administrators group. 

    If the account is not listed under Members

    1. Click Add 
    2. Enter the name of the already created account that you wish to add
    3. Click Check Names
    4. Click Ok
    5. Click Ok



Make sure that the Windows User Account Control (UAC) is disabled. 

  1. Go to Start and enter Run in the search field to open the Run Prompt.

  2. In the run prompt enter regedit and click Ok to open the Registry Editor.

  3. Navigate to HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\system.
  4. Right click the System Folder.
  5. Choose New >> DWORD (32-bit) Value and name the DWORD LocalAccountTokenFilterPolicy.
  6. Right click the newly created DWORD and select Modify.
  7. In the Edit Window set Value Data to 1.
  8. If User Account Control is disabled, EnableLUA must be set to 0 in 
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System.


Step 4 - Memory Leak in the Remote Registry Service

To resolve the Memory Leak in the Remote Registry Service:

  1. Go to Start and enter Run in the search field to open the Run Prompt.

  2. In the Run Prompt enter regedit and click Ok to open the Registry Editor.

  3. Locate the following registry sub key: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsNT\CurrentVersion\RemoteRegistry.
  4. In the details pane, on the right-hand side, double-click DisableIdleStop.
  5. Change the value to 00000001.



Windows 10

To succeed with authenticated scanning using SMB for Windows 10 and Windows 2019 Server targets, follow the steps given below:

Note

The following steps are only applicable for Windows 10 Pro or higher, NOT Windows 10 Home.


Step 1 - Enable Remote Registry

To enable Remote Registry (Optional, can also be configured within the scanner)

  1. Go to Start and enter Run in the search field to open the Run Prompt.

  2. To open Services, enter services.msc in the Run Prompt and press OK.

  3. Under Services (Local), right click Remote Registry and select Properties.

    Note

    If Remote Registry is already enabled on your device, skip to Step 2

  4. In Remote Registry Properties (Local Computer), change the Startup Type to Automatic and start the service.


Step 2 - File and Printer Sharing

To turn ON File and Printer Sharing:

  1. Go to Start and enter Network and Sharing Center in the search field to open the Network and Sharing Center.

  2. In Network and Sharing Center, go to Change advanced sharing settings, located on the left-hand side.

  3. In your current profile, Private/Guest or Public, select Turn on file and printer sharing.
  4. Click Save Changes.



Step 3 - Administrator Rights
  1. Go to Start and enter mmc in the search field to access Microsoft Management Console.

  2. Select Local Users and Groups located in the left pane of the Microsoft Management Console window.

    If Local Users and Groups is not listed:

    1. Click the File menu
    2. Select Add/Remove Snap-in
    3. Select Local Users and Groups
    4. Click Add
    5. Select Local Computer
    6. Click Finish
    7. Click Ok
  3. Enter the Groups folder and double click the Administrators group

    If the account is not listed under Members

    1. Click Add 
    2. Enter the name of the already created account that you wish to add
    3. Click Check Names
    4. Click Ok
    5. Click Ok


Note

The following steps are not recommended, if possible use the domain user account.


Make sure that the Windows User Account Control (UAC) is disabled.

  1. Go to Start and enter Run in the search field to open the Run Prompt.
  2. In the run prompt enter regedit and click OK to open the Registry Editor.
  3. Navigate to HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\system.
  4. Right click the System Folder.
  5. Choose New >> DWORD (32-bit) Value and name the DWORD LocalAccountTokenFilterPolicy.
  6. Right click the newly created DWORD and select Modify.
  7. In the Edit Window set Value Data to 1.
  8. If User Account Control is disabled, EnableLUA must be set to 0 in 
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System.


Step 4 - Memory Leak in the Remote Registry Service

To resolve the Memory Leak in the Remote Registry Service:

  1. Go to Start and enter Run in the search field to open the Run Prompt.
  2. In the Run Prompt enter regedit and click Ok to open the Registry Editor.
  3. Locate the following registry sub key: 
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsNT\CurrentVersion\RemoteRegistry.
  4. In the details pane, on the right-hand side, double-click DisableIdleStop.
  5. Change the value to 00000001.



Windows 2008 R2 Server

To succeed with authenticated scanning using SMB for Windows 2008 R2 Server targets, follow the steps given below. 

Step 1 - Enable Remote Registry

To enable Remote Registry (Optional, can also be configured within the scanner)

  1. Go to Start and enter Run in the search field to open the Run Prompt.

  2. Open Services by enter services.msc in the Run Prompt and click OK.

  3. Under Services (Local), right click Remote Registry and select Properties.

    Note

    If Remote Registry is already enabled on your device, skip to Step 2

  4. In Remote Registry Properties (Local Computer), change the Startup Type to Automatic and start the service.


Step 2 - File and Printer Sharing

To turn on File and Printer Sharing:

  1. Go to Start and enter Network and Sharing Center into the search field to open Network and Sharing Center.
  2. In Network and Sharing Center, go to Change advanced sharing settings, located on the left-hand side.

  3. In your current profile, Private/Guest or Public, select Turn on file and printer sharing.

  4. Click Save Changes.


Step 3 - Administrator Rights
  1. Go to Start and enter mmc in the search field to access Microsoft Management Console.

  2. Select Local Users and Groups, located in the left pane of the Microsoft Management Console window.

    If Local Users and Groups is not listed:

    1. Click the File menu
    2. Select Add/Remove Snap-in
    3. Select Local Users and Groups
    4. Click Add
    5. Select Local Computer
    6. Click Finish
    7. Click Ok
  3. Enter the Groups folder and double click the Administrators group.

    If the account is not listed under Members

    1. Click Add 
    2. Enter the name of the already created account that you wish to add
    3. Click Check Names
    4. Click Ok
    5. Click Ok

 

Note

The following step are not recommended, if possible use the domain user account.

  

Make sure that the Windows User Account Control (UAC) is disabled.

  1. Go to Start and enter Run in the search field to open the Run Prompt.
  2. In the Run Prompt, enter regedit and click OK to open the Registry Editor.
  3. Navigate to HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\system.
  4. Right click the System Folder.
  5. Select New >> DWORD (32-bit) Value and name the DWORD LocalAccountTokenFilterPolicy.
  6. Right click the newly created DWORD and select Modify.
  7. In the Edit Window set Value Data to 1.
  8. If User Account Control is disabled, EnableLUA must be set to 0 in 
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System.
Step 4 - Inbound File and Printer Sharing Exception

To allow Inbound File and Printer Sharing Exception

  1. Go to Start and enter Run in the search field to open the Run Prompt.
  2. To open the Group Policy Object Editor, enter gpedit.msc in the Run Prompt and click OK. 
  3. Navigate to Local Computer Policy > Computer Configuration > Administrative Templates > Network > Network Connections > Windows Firewall > Standard Profile.
  4. Under Standard Profile, right click Windows Firewall: Allow inbound file and printer sharing exception and select Edit.
  5. Select Enabled.
  6. Click Ok.



Windows 2012 R2 Server

To succeed with authenticated scanning using SMB for Windows 2012 R2 Server targets, follow the steps given below: 

Step 1 - Enable Remote Registry

To enable Remote Registry (Optional, can also be configured within the scanner)

  1. Go to Start and enter Run in the search field to open the Run Prompt.
  2. Open Services by enter services.msc in the Run Prompt and click OK.
  3. Under Services (Local), right click Remote Registry and select Properties.
  4. In Remote Registry Properties (Local Computer), change the Startup Type to Automatic and start the service.

Step 2 - File and Printer Sharing

To turn on File and Printer Sharing:

  1. Go to Start and enter Network and Sharing Center into the search field to open Network and Sharing Center.
  2. In Network and Sharing Center, go to Change advanced sharing settings, located on the left-hand side.
  3. In your current profile, Private/Guest or Public, select Turn on file and printer sharing.
  4. Click Save Changes.


Step 3 - Administrator Rights
  1. Go to Start and enter mmc in the search field to access Microsoft Management Console.
  2. Select Local Users and Groups, located in the left pane of the Microsoft Management Console window.

    If Local Users and Groups is not listed:

    1. Click the File menu
    2. Select Add/Remove Snap-in
    3. Select Local Users and Groups
    4. Click Add
    5. Select Local Computer
    6. Click Finish
    7. Click Ok
  3. Enter the Groups folder and double click the Administrators group.

    If the account is not listed under Members

    1. Click Add 
    2. Enter the name of the already created account that you wish to add
    3. Click Check Names
    4. Click Ok
    5. Click Ok



 


Note

The following step are not recommended, if possible use the domain user account.

   

Make sure that the Windows User Account Control (UAC) is disabled.

  1. Go to Start and enter Run in the search field to open the Run Prompt.
  2. In the Run Prompt, enter regedit and click OK to open the Registry Editor.
  3. Navigate to HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\system.
  4. Right click the System Folder.
  5. Select New >> DWORD (32-bit) Value and name the DWORD LocalAccountTokenFilterPolicy.
  6. Right click the newly created DWORD and select Modify.
  7. In the Edit Window set Value Data to 1.
  8. If User Account Control is disabled, EnableLUA must be set to 0 in 
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System.

     
Step 4 - Inbound File and Printer Sharing Exception

To allow Inbound File and Printer Sharing Exception

  1. Go to Start and enter Run in the search field to open the Run Prompt.
  2. To open the Group Policy Object Editor, enter gpedit.msc in the Run Promptand click OK.
  3. Navigate to Local Computer Policy > Computer Configuration > Administrative Templates > Network > Network Connections > Windows Firewall > Standard Profile.
  4. Under Standard Profile, right click Windows Firewall: Allow inbound file and printer sharing exception and select Edit.
  5. Select Enabled.
  6. Click Ok

Step 5 - Remote Registry Service

To resolve the Memory Leak in the Remote Registry Service:

  1. Go to Start and enter Run in the search field to open the Run Prompt.
  2. In the Run Prompt enter regedit and click Ok to open the Registry Editor.
  3. Locate the following registry sub key: 
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsNT\CurrentVersion\RemoteRegistry
  4. In the details pane, on the right-hand side, double-click DisableIdleStop.
  5. Change the value to 00000001.



Windows 2016 Server

To succeed with authenticated scanning using SMB for Windows 2016 Server targets, follow the procedure given below: 

Step 1 - Enable Remote Registry

To enable Remote Registry (Optional, can also be configured within the scanner)

  1. Go to Start and enter Run in the search field to open the Run Prompt.
  2. Open Services by enter services.msc in the Run Prompt and click OK.
  3. Under Services (Local), right click Remote Registry and select Properties.

    Note

    If Remote Registry is already enabled on your device, skip to Step 2.

  4. In Remote Registry Properties (Local Computer), change the Startup Type to Automatic and start the service.


Step 2 - File and Printer Sharing

To turn on File and Printer Sharing:

  1. Go to Start and enter Network and Sharing Center into the search field to open Network and Sharing Center.
  2. In Network and Sharing Center, go to Change advanced sharing settings, located on the left-hand side.
  3. In your current profile, Private/Guest or Public, select Turn on file and printer sharing.
  4. Click Save Changes.


Step 3 - Administrator Rights
  1. Go to Start and enter mmc in the search field to access Microsoft Management Console.
  2. Select Local Users and Groups, located in the left pane of the Microsoft Management Console window.

    If Local Users and Groups is not listed:

    1. Click the File menu
    2. Select Add/Remove Snap-in
    3. Select Local Users and Groups
    4. Click Add
    5. Select Local Computer
    6. Click Finish
    7. Click Ok
  3. Enter the Groups folder and double click the Administrators group.

    If the account is not listed under Members

    1. Click Add 
    2. Enter the name of the already created account that you wish to add
    3. Click Check Names
    4. Click Ok
    5. Click Ok


Note

The following steps are not recommended, if possible use the domain user account.

 Make sure that Windows User Account Control (UAC) is disabled.  

  1. Go to Start and enter Run in the search field to open the Run Prompt.
  2. In the Run Prompt, enter regedit and click OK to open the Registry Editor.
  3. Navigate to HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\system.
  4. Right click the System Folder.
  5. Select New >> DWORD (32-bit) Value and name the DWORD LocalAccountTokenFilterPolicy.
  6. Right click the newly created DWORD and select Modify.
  7. In the Edit Window set Value Data to 1.
  8. If User Account Control is disabled, EnableLUA must be set to 0 in 
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System



Step 4 - File and Printer Sharing Exception

To allow Inbound File and Printer Sharing Exception

  1. Go to Start and enter Run in the search field to open the Run Prompt.
  2. To open the Group Policy Object Editor, enter gpedit.msc in the Run Prompt and click OK.
  3. Navigate to Local Computer Policy > Computer Configuration > Administrative Templates > Network > Network Connections > Windows Firewall > Standard Profile.
  4. Under Standard Profile, right click Windows Firewall: Allow inbound file and printer sharing exception and select Edit.
  5. Select Enabled.
  6. Click Ok.

Step 5 - Memory Leak in the Remote Registry Service

To resolve the Memory Leak in the Remote Registry Service:

  1. Go to Start and enter Run in the search field to open the Run Prompt.
  2. In the Run Prompt enter regedit and click Ok to open the Registry Editor.
  3. Locate the following registry sub key: 
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsNT\CurrentVersion\RemoteRegistry
  4. In the details pane, on the right-hand side, double-click DisableIdleStop.
  5. Change the value to 00000001.



Windows 2019 Server

Note

The set up for authenticated scanning for Windows 2019 Server targets using OUTSCAN or HIAB are the same as for Windows 10.

To setup, see Windows 10 section in this document.



Core Installation

To succeed with authenticated scanning using SMB for Core Installations of Windows, there are five steps that you need to follow.

Note

PSH-commands does not work if one of the following registry keys are set to 1.
HKLM\System\CurrentControlSet\Control\Lsa\FIPSAlgorithmPolicy\Enabled.
HKLM\System\CurrentControlSet\Control\Lsa\FIPSAlgorithmPolicy.
The difference is that the top registry key is available on newer targets, and the bottom on older, see https://support.microsoft.com/en-us/help/811833/system-cryptography-use-fips-compliant-algorithms-for-encryption-hashi for more information.

Step 1 - Enable Remote Registry

Enable Remote Registry (optional, can also be configured within the scanner)

  1. Go to Start and enter cmd in the search field to open the Command Prompt.
  2. Start the Powershell by enter powershell in Command Prompt.



  3. In Powershell, enter Get-Service RemoteRegistry to verify the status of the service.



  4. If the service is not running, enter Run-Service RemoteRegistry.
  5. To set the service to run automatically, enter Set-Service RemoteRegistry –startuptype automatic.
  6. To view the information and status of all services, enter Get-WmiObject win32_service | Select Name, DisplayName, State, StartMode | Sort Name.



    The service should now be running

 

Step 2 - File and Printer Sharing

To turn on the File and Printer Sharing:

  1. Go to Start and enter cmd in the search field to open the Command Prompt.
  2. Start the Powershell by enter powershell in Command Prompt.
  3. In Powershell, enter netsh advfirewall firewall set rule group= ”File and Printer Sharing” new enable=Yes to turn on File and Printer Sharing.


Step 3 - Administrator Rights

For the authentication to succeed the account in use needs to either be the Built in Administrator or a part of the Administrator Group

Built in Administrator

To active the built-in administrator account:

  1. Go to Start and enter cmd in the search field to open the Command Prompt.
  2. In the Command Prompt, run the command: net user administrator /active: yes


     

Local User

Make sure the local account is included in the Administrators Group:

  1. Go to Start and enter cmd in the search field to open the Command Prompt.
  2. Start the Powershell by enter powershell in Command Prompt.
  3. In Powershell, run the command: 

    net localgroup administrator

    to list the uses within the administrator group.

  4. If the user is not included, run the command:

    net localgroup administrators “<username>” /add

    to add the user.


Step 4 - File and Printer Sharing

To allow Inbound File and Printer Sharing Exception

  1. Go to Start and enter cmd in the search field to open the Command Prompt.
  2. In Command Prompt run the command:

    REG add  "HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\Services\FileAndPrint” /v Enabled /t REG_DWORD /d 1 /f


Step 5 - Memory Leak in the Remote Registry

Resolving the Memory Leak in the Remote Registry Service

  1. Go to Start and enter cmd in the search field to open the Command Prompt.
  2. Start the Powershell by enter powershell in Command Prompt.
  3. In Powershell, enter regedit to access the Registry Editor.
  4. Locate the following registry sub key:  HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsNT\CurrentVersion\RemoteRegistry.
  5. In the details pane to the right, double-click DisableIdleStop.
  6. Change the value to 00000001.
  7. Click Ok.



Authenticated Scanning using OUTSCAN/HIAB

It is possible to set up SMB authentication from OUTSCAN and HIAB in three ways. 

  • Per target
  • Per target group
  • Per scan policy

Per Target

SMB authentication per target can be set in Main Menu > Netsec > Manage Targets.

To access the settings:

  1. Right click on the desired target and select Edit, it opens a Maintaining Target window.





  2. Go to the Authentication tab.
  3. Select SMB in the Authentication drop-down menu.
  4. Enter the Credentials that will be in use.
  5. Select the Enable remote registry checkbox to allow the scanner to access the Windows registry.
  6. To test if the credentials are valid, click the Test button to the right in the Test Credentials area.

Per Target Group

SMB authentication for a Target Group can be set in Main Menu > Netsec > Manage Targets.

To access the settings:

  1. Right click on the desired target group and select Set Target Authentication.



    This action displays a new window where the authentication can be set.
  2. Select SMB in the drop-down menu.
  3. Enter the credentials that will be in use for all targets in this group.
  4. Select the Enable remote registry checkbox to allow the scanner to access the Windows registry.
  5. To test if the credentials are valid, click the Test button to the right in the Test Credentials area. 

Per Scan Policy

SMB authentication can also be set when creating a Scan Policy in Scan Scheduling.

To access the settings,

  1. Go to Main Menu > Netsec > Scan Scheduling and select the Scan Policy Tab.
  2. To view the Maintaining Scanning Policy window:
    1. Click on + New policy, or
    2. Right-click on existing system policy and select Edit.

      Caution

      A system policy cannot be edited. By clicking on Edit, a copy of the template is created.
    3. In the Maintaining Scanning Policy window, select the SMB tab.




  3. Enter the credentials to be used and click Save.

    OptionDescription

    SMB domain

    The SMB domain to use when scanning the remote host. 

    SMB username

    The username to use when attempting to log on to the remote host via SMB. 

    SMB password

    The password to use when attempting to log on to the remote host via SMB. 

    SMB allow NTLMv1

    Whether to allow authentication using NTLMv1. 

    SMB allow plain-text password transmission

    Whether to allow scanning using plain-text password transmission. 

    Enable remote registry

    If this option is checked, the scanner starts the Remote Registry Service using the provided user details and once finished, disable the service again. 

    Target Credentials


    Target

    Enter a Target to test the credentials and click Test Credentials.

    Note

    There could be multiple targets with same IP/hostname which must be linked to different scanners.

    For example:

    192.168.0.1 on Scanner01
    192.168.0.1 on Scanner02

    To test the credentials on one of these targets, the scanner name should be provided along with the target to run a successful test using the format given below:

    192.168.0.1<Scanner01

    Warning

    Multiple attempts to login with the same account or on the same domain can cause account lockout and should be avoided.