Scanning with global credentials stopped working with user account

[AnnaSUBInfra]

We have used Lansweeper many years and are using both Ls Agent, Ls Push and sometimes we need to Rescan with the global credentials that are an ordinary User account that also are a member of the local Administrators group on every computer that needs scanning. It suddenly stopped working and we got Access denied every time. IF we use an domain admin account instead it works but that should not be needed, right? We are not the owner of the domain but I asked the domain administrators if something had changed lately and they said they had upgraded the domain to 2025 Microsoft Baseline Security. Could there be something to do with that? Is there any rights that have changed? We have looked at the firewalls and that is not the problem. 

Anyone who have any guesses?

Anna

[FrankSc]

Dear,
We are not aware of any changes that with BSM that would break the scanning. 

As we mainly need WMI access to read from a Windows device, DCOM hardening settings play an important role here. If your scanning server and the machines your are scanning are not on the latest Microsoft patches, you could face DCOM hardening issues. So we recommend looking into this first.