I have been having significant issues with scanners not being able to connect to certain end clients running Windows Operating Systems. I use Active Directory credentials when connecting to windows machines with the proper permissions. For a surprisingly high number of machines, I receive Error Code 3001 Logon Failed; deselcting credentialed checks for this host. I am not using certificate authentication - just AD username/password and the password is configured to expire. This user/pass credential set works for the rest of the machines in my environment, just not these hosts. Has anyone encountered this issue and have had any luck in fixing it?
Here is a sample output from the CSV report:
Remote File System Access
|-removed-||-removed-||10035818||0||Windows 7 (Service Pack 1, [++])||No||No||No||No||No||3001||Logon failed; deselecting credentialed checks for this host.|
Message was edited by: chorton on 3/7/14 2:31:15 PM CST
Message was edited by: chorton on 3/7/14 2:36:49 PM CSTMessage was edited by: chorton on 3/7/14 2:37:22 PM CST
Good question; I have seen this issue also.
My experience is a bit different, though. I see in the authenticated_hosts.csv that MVM attempts both SSHv2 Certificate and access via the five Windows methods that you show.
Here is an example. (host id edited)
|IP Address||DNS Name||NetBios Name||Asset Label||Asset Criticality||Operating System||Asset Owner||SSHv2 Certificate||SSHv2 Credential||SSHv1||Telnet||WMI Accessible||Remote Registry||Remote File System Access||Null Session||Administrator Authentication||Error Code||Error Description|
|18.104.22.168||anyhost.com||anyhost||10016058||3||Windows Server 2008 (Service Pack 2, Server, SQL Server, [++])||user||noAccess||3001||Connection failed: ERROR (0x8007274d) : No connection could be made because the target machine actively refused it.|
|22.214.171.124||anyhost.com||anyhost||10016058||3||Windows Server 2008 (Service Pack 2, Server, SQL Server, [++])||user||No||Yes||Yes||No||Yes||0|
Message was edited by: hendersonmc on 4/28/14 9:43:42 AM CDTMessage was edited by: hendersonmc on 4/28/14 11:31:10 AM CDT