(you must have administrative network access to the destination machine);

 

  1. Download and use pstools kit and the psexec.exe
    1. Run psexec from the pstools folder (cd c:\temp\pstools)

                                                               i.      Command - psexec \\10.9.120.131 -u winsrv12-scanco\Administrator -p "Scanco-Nuc2018" cmd

                                                             ii.      This runs the command prompt as if you were running it on the machine designated

  1. To take ownership of the registry file you also have to download the “SetACL” utility which runs the same way as psexec, so you copy that over to the temp folder of the destination machine and run it
    1. Command  1- SetACL.exe –on “PASTE YOUR KEY HERE” -ot reg -actn setowner -ownr “n:Administrators”
    2. Command 2 - SetACL.exe -on “PASTE YOUR KEY HERE” -ot reg -actn ace -ace “n:Administrators;p:full”
  2. Now you have ownership and can delete the key and its sub contents
    1. Command – reg delete HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Terminal Server\RCM\GracePeriod /va /f
    2. This deletes the registry entry containing the “TimeBomb” as described by Microsoft
  3. Reboot with shutdown /r and the registry reinstalls and resets and voila! Now we can RDP for another 120 days.