How to Block psexec

pstools

I wondered whether anybody knew how to prevent other systems from using psexec to run services on my machine, assuming running the windows firewall is not an option?

In addition, I have read that a hacky solution is available whereby you create a manual service called 'psexec' and then immediately disable it, since it seems to check for this on the remote system and not run if this is present. However, this seems somewhat icky to me. Any alternatives out there?

Best Answer

In order to run something on your machine with psexec, the remote user must have administrative rights to your machine. Denying other users local administrative rights to your machine is the correct way to prevent this.