HomepageKnowledge baseNetwork scanning › Network scan methods in Recover Keys

Network scan method

There are two possible options to scan network computer: "Agent deployment" and "Remote registry". By default "Agent deployment" is used, but it can be changed in "Options" dialog => "Networking" tab. Like on picture below:

Recover Keys networking options

How they work?

Agent deployment

  1. Recover Keys (RK) connects to \\REMOTE\ADMIN$ share with username and password (if provided).
  2. Agent is copied to remote share.
  3. New Windows service is created at remote PC which will run agent.
  4. If service was successfully created, RK starts new service on remote PC.
  5. Waiting until agent will finish its job.
  6. Grabs results from remote, created by agent service.
  7. Deleting service, deleting agent and cleaning up.
  8. Parse and shows results on client PC.
  9. Disconnects from remote share.

Remote registry

  1. Recover Keys (RK) connects to \\REMOTE\ADMIN$ with username and password (if provided).
  2. Connects to remote registry.
  3. If connection was unsuccessful, then RK is trying to remotely start "Remote registry" service.
  4. Scans remote registry and files for product keys, results appear immediately.
  5. Connects to remote via WMI and grabs all needed data (if applicable).
  6. Disconnects and stops "Remote registry" service (if needed).

Which one should I use?

You should use "Agent deployment" in most cases. Use "Remote registry" method only, if for some reason "Agent deployment" will not work. Requirements for both are almost same. But "Remote registry" method may be restricted to scan certain registry folders, shares, additional settings may be required for remote WMI scan, and scan of Windows 8 product key located in BIOS will not work. Furthermore, "Agent deployment" is faster, uses less bandwidth and will give you more results. Here is small comparison of both methods:

Agent deployment Remote registry
Scan time
All data / 10 Mbps00:1817:15
All data / 100 Mbps00:1705:40
Default settings / 10 Mbps00:0400:44
Default settings / 100 Mbps00:0200:18
Traffic & features
Average traffic (All data)2.7 Mb260 Mb
Average traffic (Default settings)2.7 Mb11 Mb
Can scan Windows 8 key in BIOS?YesNo
Requires additional firewall settings for WMINoYes