How do I supply good Query credentials?

Administrative rights are needed to query a target. This can be a local or domain administrative account.

Local means an account existing on the remote target machine (not the machine you are on) belonging to the "administrators group". This is typically "Administrator" by default, but could include other account names as well.

Domain means an account created for managing the entire domain, usually setup by the network administrator and existing on a domain controller machine somewhere. When using a domain account, the "Net Logon" service must be running on the target so it can check your domain credentials with the domain controller.

Solution

• Query the target with known, good administrative credentials

• If using domain credentials, make sure the domain name and account name are both being supplied.

Additional information on query credentials.