Thread Info
  • State Suggested Answer
  • Locked Locked
  • Replies 1 reply
  • Answers 1 answer
  • Subscribers 14 subscribers
  • Views 6305 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Manual PUA cleanup required: 'PsExec'

Andrew Rouse

Hey Everyone,

Scratching my head over how to deal with this PAU as I can't find much information on it on the old Google box.

The identified PAU is PsExec located within the ZIP WPJCleanUp, PsExec as well as WPJCleanUp are legitimate Windows resources, however, have the potential to be exploited.

I can't find much information on WPJCleanUp.zip other than that it can be downloaded from Microsofts site and that it's often use to remove Workplace Joined accounts on endpoints for the purposes for Tenant to tenant migration, Repurpose a device for a different user, Change the license mode for Microsoft 365 on a device.

We migrated from an on-premise environment to Office 365, and this could have been left behind as part of the process. 

I believe the way to deal with this would be just to delete the WPJCleanUp.zip file and call it a day, however, I want to know how others might have dealt with this PAU in before I proceed. 



This thread was automatically locked due to age.
Parents Reply Children
No Data
Unfiltered HTML