Incognito Operation failed: 7022

[troy () defendit com au]

Hi All,

At a client site performing pentest. Have local admin/system privs on +40
servers/workstations. Can impersonate delegation tokens of domain
users/administrators. However, when I impersonate a Domain Admin
delegation token and attempt to load cmd.exe I get the following error:

meterpreter > execute -f cmd.exe -H -c -i -t
[-] stdapi_sys_process_execute: Operation failed: 7022

This is the same for all hosts with delegation tokens for domain admins.

I can load cmd.exe for domain user accounts, and cmd.exe for system privs.

Has anybody seen this error?

Thanks,
Troy

_______________________________________________
https://mail.metasploit.com/mailman/listinfo/framework