rtownes
asked on
pushing msi file via psexec deletes boot sector files
Windows 2003 Server AD Enviroment
Windows XP sp3 computers
I used psexec to push out a component required by one of our web based vendors (it installs some activex control for IE via an .msi file). I have done this many times before with no problems, but this time, for some reason, certain folders and windows boot files were erased from the hard drive. Anyone had a similar experience? We have pushed this package out before, this is just the latest revision. Comes from a reputable software vendor and there is no chance that the package contains a virus (confirmed).
The users are not local admins so I specified my domain admin account in the psexec line as below:
psexec.exe \\"target pc" -u domain\account -p password -c \\server\share\1251.bat
Here is the 1251.bat batch file it calls:
taskkill /im msiexec.exe /f
taskkill /im iexplore.exe /f
md c:\nav3
md c:\nav6
copy \\srv-storage\installs\nav
c:\nav3\1251-3.msi /quiet
Any ideas?????
Windows XP sp3 computers
I used psexec to push out a component required by one of our web based vendors (it installs some activex control for IE via an .msi file). I have done this many times before with no problems, but this time, for some reason, certain folders and windows boot files were erased from the hard drive. Anyone had a similar experience? We have pushed this package out before, this is just the latest revision. Comes from a reputable software vendor and there is no chance that the package contains a virus (confirmed).
The users are not local admins so I specified my domain admin account in the psexec line as below:
psexec.exe \\"target pc" -u domain\account -p password -c \\server\share\1251.bat
Here is the 1251.bat batch file it calls:
taskkill /im msiexec.exe /f
taskkill /im iexplore.exe /f
md c:\nav3
md c:\nav6
copy \\srv-storage\installs\nav
c:\nav3\1251-3.msi /quiet
Any ideas?????
I honestly dont think that psexec did that.... You might wanna test again on another workstation, with Process Monitor running, and then scan the log for references to your deleted files.....
psexec only connects via the admin share, and runs what you tell it to. Exactly which files are being deleted, and are they the same on each PC?
psexec only connects via the admin share, and runs what you tell it to. Exactly which files are being deleted, and are they the same on each PC?
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
taskkill has killed another installation in progress, and that installation was just about to restore these folders and files that it has erased.
the installation itself has some tricky custom action that does that.
These are of course "theoretical" possibilities; #2 might be examined by looking into the MSI. #1 - might be looked in the event log, if there was any installation launched before this.
But generally, with this method of deployment that you have described, _some_ trouble is just the matter of time.