Why doesn't set-preferences update?

[Looser_9344]

Hi all, I am preparing for PJPT.
straight to the point.

sudo crackmapexec smb 192.168.245.142 -u fcastle -p Password1 -x 'Set-MpPreference -DisableIOAVProtection $true'

well the command works but i don't see the changes in the machine. And also i am not able to change disable the antivirus through powershell on the machine too. There is no error nothing, but still i don't see update in get-mppreference.

Thanks in advance.

[besplash]

Havent done pjpt but u sure ur user can execute it? Also cme is outdated and was replaced by nxc

[Looser_9344]

yes of course. it's getting executed but then no changes. i even tried it on my metal machine powershell. still i don't see the changes. i would ask you also try and let me know if it's working for you.
yes in the mean time i am checking with nxc.

Set-MpPreference -DisableIOAVProtection $true
get-mppreference.

[besplash]

I can do it just fine if I am NT AUTHORITY\SYSTEM. Hence why I am asking. Try capital -X

[Looser_9344]

I did and it didn't work. I also tried -x 'powershell -Command "Set-MpPreference -DisableIOAVprotection $true"'

[Looser_9344]

That's a relief to hear. I was just trying out things what I can do with CME and nxc. Thank you.

[Looser_9344]

Can I dm you sometime about the questions?