Windows 10 22H2 - Scanning Access denied

[Aluzionz]

Hi guys,

We're looking to upgrade to Windows 11 24H2 in the near future, however the first step in testing our deployment methods etc is upgrading to windows 10 22H2 using a feature update deployed via Windows Update.

Since upgrading our estate, we have noticed that Lansweeper is no longer able to scan these devices.

The asset page has the following

Scanning Access denied - possible causes:. Scanning credential is missing administrative privileges on {ASSET}. Username/password incorrect for: Global {DOMAIN\USERNAME}

The account is the same as it is for 20H2, which scans fine. and the username/password is correct, I can interactively login to the device with the account and perform admin functions. I've tested RPC access and WMI etc and all seem to work with the account credentials however Lansweeper still can't scan them. I've looked into it and saw questions around DCOM Hardening. I tried the workaround for the DCOM hardening with the regedit, however the problem still persists.

The only differnce between old device and new device, is the feature update to 22H2. Any assistance is appreciated!
Thanks

[DavidPK · Accepted solution]

Hi,

As of March of 2023 the bypass method does not work anymore. Make sure that all assets are ruining the same patch level I.E. scanning servers and the assets they are trying to scan.

More information can be found in the MS article https://techcommunity.microsoft.com/blog/windows-itpro-blog/dcom-authentication-hardening-what-you-n...

[Aluzionz]

Yep, that's the one! Turns out WSUS hasn't been working for a while so I've fixed that and deployed the latest update to the Lansweeper server and it's now scanning the assets again! Thank you for pointing me in the right direction!

Cheers!