Nessus
[Top] [All Lists]

Windows Compliance Check Problems

To: nessus@list.nessus.org
Subject: Windows Compliance Check Problems
From: Mike Forrester <mikef@pocketlint.com>
Date: Thu, 25 Jan 2007 12:37:06 -0700
Delivered-to: sp-com-lists@consult.net
Delivered-to: nessus-list1@securepoint.com
Delivered-to: nessus@list.nessus.org
List-archive: <http://mail.nessus.org/pipermail/nessus>
List-help: <mailto:nessus-request@list.nessus.org?subject=help>
List-id: Discussion of Nessus software <nessus.list.nessus.org>
List-post: <mailto:nessus@list.nessus.org>
List-subscribe: <http://mail.nessus.org/mailman/listinfo/nessus>, <mailto:nessus-request@list.nessus.org?subject=subscribe>
List-unsubscribe: <http://mail.nessus.org/mailman/listinfo/nessus>, <mailto:nessus-request@list.nessus.org?subject=unsubscribe>
Sender: nessus-bounces@list.nessus.org
User-agent: Thunderbird 1.5.0.9 (Windows/20061207)
I'm hoping someone can figure out something that I'm missing when trying to get the Windows compliance checks working (UNIX works fine).

Nessus Server:
CentOS 4.4
Nessus 3.0.3 (RedHat ES4 rpm)
Nessus Direct Feed

Nessus Client:
Fedora Core 6
NessusClient 1.0.2

Policy Info (brief):
Plugins:
Windows Compliance Checks Plugin - enabled
Enable dependencies at runtime - enabled
Silent dependencies - enabled

Crendentials:
SMB account - specified (local admin)
SMB password - specified
SMB domain - specified

Target selection:
Target: Single Windows XP SP2 host

Prefs:
Windows Compliance Checks:
Policy file #1: federal_nsa_microsoft_xp_user_right_assignment.audit
Policy file #2: federal_audit_microsoft_windows_os_guideline.audit

I get the following error in nessusd.dump every time I try to run a scan:

[26363](compliance_check.nbin:0x161a) A non-authenticated script attempted to use an authenticated function - returning NULL [26363](compliance_check.nbin:0x161a) script_get_preference_file_location: script is not authenticated!

I've tried both domain and local authenticated accounts (just local Admin, not domain). I get entries in the Security event log for two successful login for whatever test account I use plus a couple others (administrator and nessus+random number). When I enable Windows checks that check policy requiring a login, they work just fine.

Any ideas on what I'm missing?

Thanks,
Mike
_______________________________________________
Nessus mailing list
Nessus@list.nessus.org
http://mail.nessus.org/mailman/listinfo/nessus

<Prev in Thread] Current Thread [Next in Thread>