Solved

Help executing a batch file on a remote PC using Powershell (PSRemote)

Posted on 2013-12-30
2
7,350 Views
Last Modified: 2014-01-12
Good Morning Powershell Experts,

I have been asked to uninstall all old versions of Adobe Flash and install the newest version on several hundred PCs.  I’ve read about doing this with a GPO or through SCCM (we use SCCM 2007), but I have not been successful with either of these options.  The cleanest way I have found to do this is using the following script (named AdobeFlashInstall.cmd):

taskkill /f /t /im iexplore.exe
pushd "\\netapp3140a\sccmdata$\sources\apps\AdobeFlashPlayer"
Uninstall_flash_player.exe -uninstall -force
Install_flash_player_11_active_x.msi /QB!
Popd

What I would like to do is use Powershell to launch the AdobeFlashInstall.cmd script on the remote PCs.  

To see how well this would work, I’m trying to initiate a remote launch of the AdobeFlashInstall.cmd script on one of my test machines.  The Powershell command I’m using is as follows:

Invoke-command –ComputerName TestPC1 –ScriptBlock {Start-Process “\\Server1\SharedApps\Adobe\InstallAdobeFlash.cmd”} –credential mydomain\nick

When I run the command above, I’m prompted for my password, which I enter, and then I get the following error:

This command cannot be executed due to the error:  Access is denied.
      + CategoryInfo            : InvalidOperation: (:) [Start-Process], InvalidOperationException
      + FullyQualifiedErrorID : InvalidOperationException,Microsoft.Powershell.Commands.StartProcessCommand
      + PSComputerName      : TestPC1

I have verified PSRemoting is enabled and working on the test machine using the following command:

Invoke-command – ComputerName TestPC1 –ScriptBlock {Get-Process} –credential mydomain\nickd

The above command works.

I have verified that everyone has access to the share on the server.  I have also added domain computers to have access on the share.  I have tested this by accessing the share from my PC and one of my other test PCs without any issues.  Any ideas on what I’m doing wrong?

As always, thanks in advance for your help.

Nick
0
Comment
Question by:ndalmolin_13
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
2 Comments
 
LVL 40

Accepted Solution

by:
footech earned 500 total points
ID: 39746388
When accessing remote shares from within a remote PS session, you will need to use credssp.  Basically the reason you're getting access denied is because when it tries to access "\\Server1\SharedApps\Adobe\InstallAdobeFlash.cmd" from within the remote session it doesn't have any credentials.  The following links do a good job of explaining the situation and how to configure PS to use CredSSP so that credentials are passed on.
http://blogs.technet.com/b/heyscriptingguy/archive/2012/11/14/enable-powershell-quot-second-hop-quot-functionality-with-credssp.aspx
http://dustinhatch.tumblr.com/post/24589312635/enable-powershell-remoting-with-credssp-using-group

After that is set up you would need to modify your invoke-command to be more like
Invoke-command –ComputerName TestPC1 –ScriptBlock {Start-Process "\\Server1\SharedApps\Adobe\InstallAdobeFlash.cmd"} –credential mydomain\nick -authentication credssp

Open in new window

However, I'm not 100% certain that calling start-process with the .CMD script will do what you want it to, but you'll find out!
0
 
LVL 40

Expert Comment

by:Subsun
ID: 39746579
Alternate way is to try with PsExec to execute the batch file..
http://ss64.com/nt/psexec.html
0

Featured Post

Does Powershell have you tied up in knots?

Managing Active Directory does not always have to be complicated.  If you are spending more time trying instead of doing, then it's time to look at something else. For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

This script can help you clean up your user profile database by comparing profiles to Active Directory users in a particular OU, and removing the profiles that don't match.
My attempt to use PowerShell and other great resources found online to simplify the deployment of Office 365 ProPlus client components to any workstation that needs it, regardless of existing Office components that may be needing attention.
I've attached the XLSM Excel spreadsheet I used in the video and also text files containing the macros used below. https://filedb.experts-exchange.com/incoming/2017/03_w12/1151775/Permutations.txt https://filedb.experts-exchange.com/incoming/201…
Exchange organizations may use the Journaling Agent of the Transport Service to archive messages going through Exchange. However, if the Transport Service is integrated with some email content management application (such as an antispam), the admini…

739 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question