The solution to this problem is that the "Local Service" account must have "read" access to the following registry key:
HKLM\System\Currentcontrolset\control\securepipeservers\winreg There are snippets here and there on Google implicating this issue can happen when an upgrade is done to a W2K/SP4 computer to XP or Server 2003. It supposedly does not happen to a pre-SP4 W2K upgrade to XP or Server 2003. If this fix doesn't work, check MS KB313222 on how to reset security settings back to the default. HTH, Mike Thommes -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Free, Bob Sent: Thursday, June 01, 2006 3:51 PM To: [email protected] Subject: RE: [ActiveDir] OT: srvinfo output incomplete It's been a while but last time I checked srvinfo was predominately registry calls so I'd look at Remote Registry Service, policy settings like Network Access: Remotely accessible Registry paths, stuff like that. \HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurePipeServers\w inreg might be enlightening... Regmon on the remote machine should be helpful... ________________________________ From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Thommes, Michael M. Sent: Thursday, June 01, 2006 8:55 AM To: [email protected] Subject: [ActiveDir] OT: srvinfo output incomplete Situation: running "srvinfo \\computer_name <file://\\computer_name> " with domain admin credentials from a remote computer. One w2k3/sp1 server target returns the full complement of information, including CPU, BIOS info, hotfixes, network card info, uptime. Another w2k3sp1 server target returns only partial information, missing CPU, BIOS info, hotfixes, network card info, and uptime. Also, this second computer also returns "Domain: Error 5" and "PDC: Error 5". This same domain admin can log into the second computer target directly and run "srvinfo" and get a full complement of information! Both target computers are in AD and have the same policies applied to them. Security options appear to be the same. Does anyone have any thoughts as to what might be preventing a complete information disclosure when running srvinfo from across the network? TIA! Mike Thommes List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive: http://www.activedir.org/ml/threads.aspx List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive: http://www.activedir.org/ml/threads.aspx
