Common errors during in Active Directory set up

Here are the most common errors encountered when setting up the Stoïk Active Directory scan.

1. Failure to meet prerequisites when launching the scan

2. Automatic closure of the script after execution

3. Message "PingCaste has stopped working"

1. Failure to meet prerequisites when launching the scan

Most of the time, these bugs are related to incorrect configuration of the endpoint (workstation or server) used to deploy the scan. The endpoint must meet the following prerequisites:

• Windows version

  • Windows 10 or later on a workstation

  • Windows Server 2012 R2 or later on a server

• Have access to the Internet

• Be enrolled in Active Directory and connected to the domain controller

• Be logged in to a domain administrator account

• Allow unsigned scripts to run

  • 1st solution -> Run the following command: Set-ExecutionPolicy Unrestricted -Scope LocalMachine

  • 2nd solution -> Add the binary file to the ignore list in Defender or a similar solution. Then, modify the execution policy: Set-ExecutionPolicy Bypass -Scope Process, then run the script.

• Use a script downloaded less than 24 hours ago

• Have the latest version of PowerShell

  • Run the following command to check the current version: $PSVersionTable.PSVersion

2. Automatic closure of the script after execution

This means that script execution is restricted on the terminal. Here is a three-step solution:

1. Download the script and go to downloads, then type powershell -ep bypass in the search bar:

   
2. The PowerShell console should open automatically. Once it has opened, type & '.\ then press "TAB" until the correct script file is visible:

   
3. Press "Enter".

3. Message "PingCastle has stopped working"

In this case, ensure that both of the following conditions are met:

1. You have an internet connection on your domain controller

2. Your firewall is not blocking access to https://api.prod.ad-scan.cyber.stoik.io