Network scan method

There are two possible options to scan network computer: "Agent deployment" and "Remote registry". By default "Agent deployment" is used, but in can be changed in "Options" dialog => "Networking" tab. Like on picture below:

How they work?

1. Recover Keys (RK) connects to \\REMOTE\ADMIN$ share with username and password (if provided).
2. Agent is copied to remote share.
3. New Windows service is created at remote PC which will run agent.
4. If service was successfully created, RK starts new service on remote PC.
5. Waiting until agent will finish its job.
6. Grabs results from remote, created by agent service.
7. Deleting service, deleting agent and cleaning up.
8. Parse and shows results on client PC.
9. Disconnects from remote share.

1. Recover Keys (RK) connects to \\REMOTE\ADMIN$ with username and password (if provided).
2. Connects to remote registry.
3. If connection was unsuccessful, then RK is trying to remotely start "Remote registry" service.
4. Scans remote registry and files for product keys, results appear immediately.
5. Connects to remote via WMI and grabs all needed data (if applicable).
6. Disconnects and stops "Remote registry" service (if needed).

Which one should I use?

You should use "Agent deployment" in most cases. Use "Remote registry" method only, if for some reason "Agent deployment" will not work. Requirements for both are almost same. But "Remote registry" method may be restricted to scan certain registry folders, shares, additional settings may be required for remote WMI scan, and scan of Windows 8 product key located in BIOS will not work. Furthermore, "Agent deployment" is faster, uses less bandwidth and will give you more results. Here is small comparison of both methods: