Super User is a question and answer site for computer enthusiasts and power users. It only takes a minute to sign up.
Sign up to join this community
I have some Windows 7 machines on the domain with a Windows 2012 DC.
Is it normal that I can't connect with PSExec to run a command as a local administrator from one Windows 7 machine to another without disabling the firewall?
What setting should I change to allow PSExec to work?
Is it normal that I can't connect with psexec to run a command as a local administrator from one Windows 7 machine to another without disabling the firewall?
Yes. A firewall is meant to block connections, and if configured to do so, will block connections from programs you would otherwise want unblocked. Being an administrator doesn't give you any special exemption from firewall rules unless your firewall rules are configured to apply differently to admins versus users, which is possible but not the default configuration.
What setting should I change to allow psexec to work?
On the machine you want to remotely access with PsExec, enable the following Inbound firewall rules in the predefined File and Printer Sharing group:
With these rules enabled, users with Administrative permissions on the machine will be able to issue commands remotely via PsExec.
have you seen this https://stackoverflow.com/questions/18791468/psexec-win7-to-win7-access-denied-psexesvc-remains also might be able to add an exception for the app in windows firewall Permanently add a firewall exception on Windows 7
