LoicVeirman/HardenAD

failure: create administration accounts used by the tier model

Closed this issue · 6 comments

Hello,

Error while execution of script :

02-05 14:09:47 **** FUNCTION STARTS
2024-02-05 14:09:47 ****
2024-02-05 14:09:47 ---> Function caller..........:
2024-02-05 14:09:47 ---> xml skeleton file........: loaded successfully
2024-02-05 14:09:47 ---> variable XmlLoaded.......: True
2024-02-05 14:09:47 ---> variable noError.........: True
2024-02-05 14:09:47 ---> is windows 2008/R2.......: False
2024-02-05 14:10:15 ---> Parameter DomainRootDN...: DC=BLABLABLA,DC=COM
2024-02-05 14:10:15 ---> xml data loaded (10 account(s))
2024-02-05 14:10:15 ---> binaries path=C:\tmp\SecureAD\Tools\KeePass-2.48.1
2024-02-05 14:10:15 ---> database path=C:\tmp\SecureAD\Outputs
2024-02-05 14:10:15 ---> BUILTIN\Utilisateurs now has FULLCONTROL permission on C:\tmp\SecureAD\Tools\KeePass-2.48.1
2024-02-05 14:10:15 ---> BUILTIN\Utilisateurs now has FULLCONTROL permission on C:\tmp\SecureAD\Outputs
2024-02-05 14:10:15 ---> keepass binaries loaded
2024-02-05 14:10:16 ---! keepass database not found!
2024-02-05 14:10:16 ---> +++ Password generated
2024-02-05 14:10:17 ---> !!! user could not be created! (T0M-AHARDEN)
2024-02-05 14:10:17 ---> +++ Password generated
2024-02-05 14:10:17 ---> !!! user could not be created! (T0O-AHARDEN)

Many tries have been made.
HardenAD 2.9.5 Beta 6

You must create the keepass database yourself before running HArdenAD script

Yes, it's working by creating database before execution. But this part is not documented.
Maybe script could be create needed database with password which is configured in TasksSequence xml file ?

It will be in a future release.

Note: if no kdbx found, a text file is generated with the passwords.

Regarding the user creation issue, please refer to the log "Logs/Debug/Debug_New-AdministrationAccounts.log and search for !!! input.

Fixed in 2.9.7. An empty .kdbx is present in the repo.