RMS200275: Requirements to manage workgroup machines from a domain distribution server

In order for remote execution commands to work against workgroup machines, the mgsRET$ share must be added to the domain distribution servers (DS) NullSessionShares list. 

This can be achieved via three different methods:- 

1.  The DS's Local Security Policy tool: 

2.  Directly manipulating the DS's registry: 

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\LanmanServer\Parameters]
"NullSessionShares"=hex(7):6d,00,67,00,73,00,52,00,45,00,54,00,24,00,00,00,00,\
  00

3.  Via a domain GPO: 

 

 

In order for files to be uploaded to a domain DS from a workgroup machine, the DS's reporting location needs to be configured with credentials. 

Comments

Powered by Zendesk