?
Solved

Psexec don't work running as LocalSystem

Posted on 2013-01-23
7
Medium Priority
?
396 Views
Last Modified: 2014-03-12
Hi Guys,

I need some help, I have a service running as LocalSystem on windows 2008 and in any  remote installation of the windows 7 64 bits can not send some file

my sintax:

Psexec /accepteula "\\ch1c4umPC" -c -f -d -i -u "domtest.local\administrator" -p "mypass" -n 10 -h c:\installer.exe" "\VERYSILENT" "\SERVERNAME="SERV2008"";

but when I run as administrator  level user the  command functions normally.

And if I run as a service NT AUTHORITY/LocalService the remote installation work perfect but my level user privileges are minimal
0
Comment
Question by:bluepex
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 3
  • 2
7 Comments
 
LVL 79

Expert Comment

by:arnold
ID: 38818797
installer.exe does it require other resources or just copying installer.exe to the remote system and running it enough?

Take out the -i (interact with the desktop) option it does not serve any purpose here.
Not sure what your -h option is if you want it to run with a high priority, you should use -high

You have admin login information.  you may want to include the -s option that will run the remote process with system level rights provided the username password you are using/providing are valid.

Depending on the software you are trying to push, using Software deployment in a GPO might be a better more manageable setup/approach.
0
 

Author Comment

by:bluepex
ID: 38843198
I did the tests, but not solved!!
0
 
LVL 79

Expert Comment

by:arnold
ID: 38843228
What test? Did you copy install.exe to a separate system and tried to install and it failed?
I.e. install.exe is just a part of what s needed.

You should create a share and use the shared path with psexec to install.  
Install.exe /?
See if it has options such as /a that help in creating an MSI, response file that can be used in a GPO to deploy the software installation.
0
 

Author Comment

by:bluepex
ID: 38843859
Yes I did all the tests imaginable, at least for me ...

The problem is that when i running psexec in user-level and i open the cmd psexec call and pass the parameters works but if I run eg psexec -s cmd /c psexec "\\ch1c4umPC" -d -i -u "domtest.local\administrator" -p "mypass" -n 10 -h c:\installer.exe" "\VERYSILENT" "\SERVERNAME="SERV2008""; when I indicate a machine windows 7 always returns access denied
0
 
LVL 79

Accepted Solution

by:
arnold earned 630 total points
ID: 38844464
Why do you have two psexec in the command line?
you should have only one.the last option should be /verysilent

You seem to be using psexec twice once to start cmd on the local system that copies and will run psexec "\\ch1c4umPC" -d -i -u "domtest.local\administrator" -p "mypass" -n 10 -h c:\installer.exe" "\VERYSILENT"

To what end?
Why not run
psexec "\\ch1c4umPC" -c -d -i -u "domtest.local\administrator" -p "mypass" -n 10 -h c:\installer.exe" "\VERYSILENT" from the get go?
0

Featured Post

Four New Appliances. Same Industry-leading Speeds.

But don't take it from us.  The Firebox M370 is Miercom tested and Miercom approved, outperforming its competitors for stateless and stateful traffic throughput scenarios.  Learn more about the M370, M470, M570 and M670 and find the right solution for your organization today!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

There are times when we need to generate a report on the inbox rules, where users have set up forwarding externally in their mailbox. In this article, I will be sharing a script I wrote to generate the report in CSV format.
In the absence of a fully-fledged GPO Management product like AGPM, the script in this article will provide you with a simple way to watch the domain (or a select OU) for GPOs changes and automatically take backups when policies are added, removed o…
To efficiently enable the rotation of USB drives for backups, storage pools need to be created. This way no matter which USB drive is installed, the backups will successfully write without any administrative intervention. Multiple USB devices need t…
Exchange organizations may use the Journaling Agent of the Transport Service to archive messages going through Exchange. However, if the Transport Service is integrated with some email content management application (such as an antispam), the admini…
Suggested Courses

801 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question