Common setup errors

Here are the most common errors encountered when setting up the Stoïk Active Directory scan.

Failure to meet prerequisites when launching the scan

Most of the time, these bugs are related to incorrect configuration of the endpoint (workstation or server) used to deploy the scan. The endpoint must meet the following prerequisites:

• Windows version:

  • Windows 10 or later on a workstation

  • Windows Server 2016 or later on a server (must have recent security patches applied)

• Internet access

• Enrolled in Active Directory and connected to the domain controller

• Logged in to a domain administrator account

• Unsigned script execution allowed:

  • Option A: Set-ExecutionPolicy Unrestricted -Scope LocalMachine

  • Option B: Add the binary file to the ignore list in Defender or a similar solution, then run Set-ExecutionPolicy Bypass -Scope Process and run the script.

• Script downloaded within the last 24 hours

• Latest version of PowerShell, check with: $PSVersionTable.PSVersion

Automatic closure of the script after execution

This means that script execution is restricted on the terminal. Here is a three-step solution:

1. Download the script and go to Downloads, then type powershell -ep bypass in the search bar:

   
2. The PowerShell console should open automatically. Once it has opened, type & '.\ then press Tab until the correct script file is visible:

   
3. Press Enter.

Message "PingCastle has stopped working"

In this case, ensure that both of the following conditions are met:

• You have an internet connection on your domain controller.

• Your firewall is not blocking access to https://api.prod.ad-scan.cyber.stoik.io.