Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[-] Cannot rename the machine account , Reason 00000523: SysErr: DSID-031A1260, problem 22 (Invalid argument), data 0 #18

Open
useragent23253 opened this issue Feb 16, 2023 · 9 comments

Comments

@useragent23253
Copy link

oot@US-UBNT:~/Github/noPac# sudo python3 noPac.py VB.local/user:'password2' -dc-ip 192.168.0.10 -shell --impersonate administrateur -use-ldap -dump
[] Current ms-DS-MachineAccountQuota = 10
[
] Selected Target srv-dc.cns.local
[] will try to impersonate administrateur
[
] Adding Computer Account "WIN-OAUXQPSRDGR$"
[] MachineAccount "WIN-OAUXQPSRDGR$" password = RqkVgjy(Y5d
[] Successfully added machine account WIN-OAUXQPSRDGR$ with password RqkVgjy(Y5d.
[*] WIN-OAUXQPSRDGR$ object = CN=WIN-OAUXQPSRDGR,CN=Computers,DC=CNS,DC=LOCAL
[-] Cannot rename the machine account , Reason 00000523: SysErr: DSID-031A1260, problem 22 (Invalid argument), data 0

[*] Attempting to del a computer with the name: WIN-OAUXQPSRDGR$
[-] Delete computer WIN-OAUXQPSRDGR$ Failed! Maybe the current user does not have permission.

@davidlebr1
Copy link

I came across the same issue. Did you find a solution? I'm thinking that it is patched.

@bushdav
Copy link

bushdav commented Jun 12, 2023

How about user rights?

@useragent23253
Copy link
Author

Default domain user

@bushdav
Copy link

bushdav commented Jun 14, 2023

What do you mean ?

@useragent23253
Copy link
Author

just domain user

@kraperrm
Copy link

kraperrm commented Jun 15, 2023

I have same issue. Normal domain user and --impersonate is Domain Admin
Computer Created in Domain but error showing [-] Cannot rename the machine account , Reason 00000523: SysErr: DSID-031A1260, problem 22 (Invalid argument), data 0
I think Nopac creator also not know about this error
Any one Expert please reply.

@davidlebr1
Copy link

I figure it out the issue. The user I was using didn't have the permission to create computer object.

@bushdav
Copy link

bushdav commented Jun 16, 2023

with the default MachineAccountQuota present ?

@kraperrm
Copy link

kraperrm commented Jun 19, 2023

Computer object created but kerberos sessionerror kdc_err_tgt_revoked(tgt has been revoked). After Server update with kb5008380 Patch Nopac not able to work. After this patch applied, even Domain admin Also gave this error. I have tried Domain Admin User and password Instead of normal user. (with the default MachineAccountQuota 10)

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

4 participants