3

I have some Windows 7 machines on the domain with a Windows 2012 DC.

Is it normal that I can't connect with PSExec to run a command as a local administrator from one Windows 7 machine to another without disabling the firewall?

What setting should I change to allow PSExec to work?

3

Is it normal that I can't connect with psexec to run a command as a local administrator from one Windows 7 machine to another without disabling the firewall?

Yes. A firewall is meant to block connections, and if configured to do so, will block connections from programs you would otherwise want unblocked. Being an administrator doesn't give you any special exemption from firewall rules unless your firewall rules are configured to apply differently to admins versus users, which is possible but not the default configuration.

What setting should I change to allow psexec to work?

On the machine you want to remotely access with PsExec, enable the following Inbound firewall rules in the predefined File and Printer Sharing group:

  • NB-Datagram-In
  • NB-Name-In
  • NB-Session-In

enter image description here

With these rules enabled, users with Administrative permissions on the machine will be able to issue commands remotely via PsExec.

2
-1

have you seen this https://stackoverflow.com/questions/18791468/psexec-win7-to-win7-access-denied-psexesvc-remains also might be able to add an exception for the app in windows firewall Permanently add a firewall exception on Windows 7

2

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.