Return
-
Title
K2000/SDA: Scan user states - Requirements -
Description
Scan user states - Requirements -
Cause
You can capture user states with the KACE SDA, or any linked RSA appliances.
-
Resolution
When scanning devices running Windows 7 and higher, configure the following settings:- Turn off simple file sharing or the firewall.
- Enabled access to the netlogon service through the Firewall
- Confirm that the netlogon service is running
- Enable the default administrator account.
- In the Local GPO Editor disable “User Account Control: Run all Administrators in Admin Approval Mode”.
- Turn off Windows Defender (if running Windows 10, remember to disable the Real-time protection).
- Enable file and print sharing.
- Set UAC (User Account Control) to never notify.
- Confirm access to the SDA's SMB from the target machine
-----NOTE: UAC is enabled in Windows 7 in the higher level by default.-----Software RequirementsMust use the latest version of Windows PE/WinPE (Windows Preinstallation Environment). For more info, see What's New in Windows PE https://docs.microsoft.com/en-us/windows-hardware/get-started/what-s-new-in-kits-and-tools for guidance.-----Related topicsNew and Changed Functionality of the Windows PE and compares it with previous versions, see https://msdn.microsoft.com/en-us/ie/dn938350(v=vs.94) -
Additional Information
How to set up USMT Software to scan User States on the K2000, see https://support.quest.com/kb/123455 for guidance.