Solved

Psexec don't work running as LocalSystem

Posted on 2013-01-23
7
394 Views
Last Modified: 2014-03-12
Hi Guys,

I need some help, I have a service running as LocalSystem on windows 2008 and in any  remote installation of the windows 7 64 bits can not send some file

my sintax:

Psexec /accepteula "\\ch1c4umPC" -c -f -d -i -u "domtest.local\administrator" -p "mypass" -n 10 -h c:\installer.exe" "\VERYSILENT" "\SERVERNAME="SERV2008"";

but when I run as administrator  level user the  command functions normally.

And if I run as a service NT AUTHORITY/LocalService the remote installation work perfect but my level user privileges are minimal
0
Comment
Question by:bluepex
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 3
  • 2
7 Comments
 
LVL 78

Expert Comment

by:arnold
ID: 38818797
installer.exe does it require other resources or just copying installer.exe to the remote system and running it enough?

Take out the -i (interact with the desktop) option it does not serve any purpose here.
Not sure what your -h option is if you want it to run with a high priority, you should use -high

You have admin login information.  you may want to include the -s option that will run the remote process with system level rights provided the username password you are using/providing are valid.

Depending on the software you are trying to push, using Software deployment in a GPO might be a better more manageable setup/approach.
0
 

Author Comment

by:bluepex
ID: 38843198
I did the tests, but not solved!!
0
 
LVL 78

Expert Comment

by:arnold
ID: 38843228
What test? Did you copy install.exe to a separate system and tried to install and it failed?
I.e. install.exe is just a part of what s needed.

You should create a share and use the shared path with psexec to install.  
Install.exe /?
See if it has options such as /a that help in creating an MSI, response file that can be used in a GPO to deploy the software installation.
0
 

Author Comment

by:bluepex
ID: 38843859
Yes I did all the tests imaginable, at least for me ...

The problem is that when i running psexec in user-level and i open the cmd psexec call and pass the parameters works but if I run eg psexec -s cmd /c psexec "\\ch1c4umPC" -d -i -u "domtest.local\administrator" -p "mypass" -n 10 -h c:\installer.exe" "\VERYSILENT" "\SERVERNAME="SERV2008""; when I indicate a machine windows 7 always returns access denied
0
 
LVL 78

Accepted Solution

by:
arnold earned 210 total points
ID: 38844464
Why do you have two psexec in the command line?
you should have only one.the last option should be /verysilent

You seem to be using psexec twice once to start cmd on the local system that copies and will run psexec "\\ch1c4umPC" -d -i -u "domtest.local\administrator" -p "mypass" -n 10 -h c:\installer.exe" "\VERYSILENT"

To what end?
Why not run
psexec "\\ch1c4umPC" -c -d -i -u "domtest.local\administrator" -p "mypass" -n 10 -h c:\installer.exe" "\VERYSILENT" from the get go?
0

Featured Post

Free eBook: Backup on AWS

Everything you need to know about backup and disaster recovery with AWS, for FREE!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

This article explains how to install and use the NTBackup utility that comes with Windows Server.
For anyone that has accidentally used newSID with Server 2008 R2 (like I did) and hasn't been able to get the server running again because you were unlucky (as I was) and had no backups - I was able to get things working by doing a Registry Hive rec…
This Micro Tutorial hows how you can integrate  Mac OSX to a Windows Active Directory Domain. Apple has made it easy to allow users to bind their macs to a windows domain with relative ease. The following video show how to bind OSX Mavericks to …
There are cases when e.g. an IT administrator wants to have full access and view into selected mailboxes on Exchange server, directly from his own email account in Outlook or Outlook Web Access. This proves useful when for example administrator want…

717 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question