AWS WMI Scanning - Access Denied

Owned by Daniel Stuart-Kelly
Last updated: Aug 21, 2024 by Bhaver Singh
1 min read

Scenario: Error “Access Denied” when scanning an AWS Windows machine with a local user account

 

image-20240820-154245.png

 

 

 

Open Group Policy editor and navigate to Computer Configuration -> Windows Settings -> Local Policies -> Security Options

Double click to modify User Account Control: Run all administrators in Admin Approval Mode

Change to Disabled

image-20240820-154417.png

Same can be disabled from registry by running below powershell command.

Set-ItemProperty -Path REGISTRY::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System -Name EnableLUA -Value 0

REBOOT

I mean actually reboot, dont just say that you rebooted without really rebooting.

 

Test Wbemtest again