Solved

Psexec don't work running as LocalSystem

Posted on 2013-01-23
7
390 Views
Last Modified: 2014-03-12
Hi Guys,

I need some help, I have a service running as LocalSystem on windows 2008 and in any  remote installation of the windows 7 64 bits can not send some file

my sintax:

Psexec /accepteula "\\ch1c4umPC" -c -f -d -i -u "domtest.local\administrator" -p "mypass" -n 10 -h c:\installer.exe" "\VERYSILENT" "\SERVERNAME="SERV2008"";

but when I run as administrator  level user the  command functions normally.

And if I run as a service NT AUTHORITY/LocalService the remote installation work perfect but my level user privileges are minimal
0
Comment
Question by:bluepex
  • 3
  • 2
7 Comments
 
LVL 77

Expert Comment

by:arnold
ID: 38818797
installer.exe does it require other resources or just copying installer.exe to the remote system and running it enough?

Take out the -i (interact with the desktop) option it does not serve any purpose here.
Not sure what your -h option is if you want it to run with a high priority, you should use -high

You have admin login information.  you may want to include the -s option that will run the remote process with system level rights provided the username password you are using/providing are valid.

Depending on the software you are trying to push, using Software deployment in a GPO might be a better more manageable setup/approach.
0
 

Author Comment

by:bluepex
ID: 38843198
I did the tests, but not solved!!
0
 
LVL 77

Expert Comment

by:arnold
ID: 38843228
What test? Did you copy install.exe to a separate system and tried to install and it failed?
I.e. install.exe is just a part of what s needed.

You should create a share and use the shared path with psexec to install.  
Install.exe /?
See if it has options such as /a that help in creating an MSI, response file that can be used in a GPO to deploy the software installation.
0
 

Author Comment

by:bluepex
ID: 38843859
Yes I did all the tests imaginable, at least for me ...

The problem is that when i running psexec in user-level and i open the cmd psexec call and pass the parameters works but if I run eg psexec -s cmd /c psexec "\\ch1c4umPC" -d -i -u "domtest.local\administrator" -p "mypass" -n 10 -h c:\installer.exe" "\VERYSILENT" "\SERVERNAME="SERV2008""; when I indicate a machine windows 7 always returns access denied
0
 
LVL 77

Accepted Solution

by:
arnold earned 210 total points
ID: 38844464
Why do you have two psexec in the command line?
you should have only one.the last option should be /verysilent

You seem to be using psexec twice once to start cmd on the local system that copies and will run psexec "\\ch1c4umPC" -d -i -u "domtest.local\administrator" -p "mypass" -n 10 -h c:\installer.exe" "\VERYSILENT"

To what end?
Why not run
psexec "\\ch1c4umPC" -c -d -i -u "domtest.local\administrator" -p "mypass" -n 10 -h c:\installer.exe" "\VERYSILENT" from the get go?
0

Featured Post

PRTG Network Monitor: Intuitive Network Monitoring

Network Monitoring is essential to ensure that computer systems and network devices are running. Use PRTG to monitor LANs, servers, websites, applications and devices, bandwidth, virtual environments, remote systems, IoT, and many more. PRTG is easy to set up & use.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

A brief introduction to what I consider to be the best editor for PowerShell.
The Nano Server Image Builder helps you create a custom Nano Server image and bootable USB media with the aid of a graphical interface. Based on the inputs you provide, it generates images for deployment and creates reusable PowerShell scripts that …
This tutorial will give a an overview on how to deploy remote agents in Backup Exec 2012 to new servers. Click on the Backup Exec button in the upper left corner. From here, are global settings for the application such as connecting to a remote Back…
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles to another domain controller. Log onto the new domain controller with a user account t…

828 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question