Solved

Help executing a batch file on a remote PC using Powershell (PSRemote)

Posted on 2013-12-30
2
7,468 Views
Last Modified: 2014-01-12
Good Morning Powershell Experts,

I have been asked to uninstall all old versions of Adobe Flash and install the newest version on several hundred PCs.  I’ve read about doing this with a GPO or through SCCM (we use SCCM 2007), but I have not been successful with either of these options.  The cleanest way I have found to do this is using the following script (named AdobeFlashInstall.cmd):

taskkill /f /t /im iexplore.exe
pushd "\\netapp3140a\sccmdata$\sources\apps\AdobeFlashPlayer"
Uninstall_flash_player.exe -uninstall -force
Install_flash_player_11_active_x.msi /QB!
Popd

What I would like to do is use Powershell to launch the AdobeFlashInstall.cmd script on the remote PCs.  

To see how well this would work, I’m trying to initiate a remote launch of the AdobeFlashInstall.cmd script on one of my test machines.  The Powershell command I’m using is as follows:

Invoke-command –ComputerName TestPC1 –ScriptBlock {Start-Process “\\Server1\SharedApps\Adobe\InstallAdobeFlash.cmd”} –credential mydomain\nick

When I run the command above, I’m prompted for my password, which I enter, and then I get the following error:

This command cannot be executed due to the error:  Access is denied.
      + CategoryInfo            : InvalidOperation: (:) [Start-Process], InvalidOperationException
      + FullyQualifiedErrorID : InvalidOperationException,Microsoft.Powershell.Commands.StartProcessCommand
      + PSComputerName      : TestPC1

I have verified PSRemoting is enabled and working on the test machine using the following command:

Invoke-command – ComputerName TestPC1 –ScriptBlock {Get-Process} –credential mydomain\nickd

The above command works.

I have verified that everyone has access to the share on the server.  I have also added domain computers to have access on the share.  I have tested this by accessing the share from my PC and one of my other test PCs without any issues.  Any ideas on what I’m doing wrong?

As always, thanks in advance for your help.

Nick
0
Comment
Question by:ndalmolin_13
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
2 Comments
 
LVL 40

Accepted Solution

by:
footech earned 500 total points
ID: 39746388
When accessing remote shares from within a remote PS session, you will need to use credssp.  Basically the reason you're getting access denied is because when it tries to access "\\Server1\SharedApps\Adobe\InstallAdobeFlash.cmd" from within the remote session it doesn't have any credentials.  The following links do a good job of explaining the situation and how to configure PS to use CredSSP so that credentials are passed on.
http://blogs.technet.com/b/heyscriptingguy/archive/2012/11/14/enable-powershell-quot-second-hop-quot-functionality-with-credssp.aspx
http://dustinhatch.tumblr.com/post/24589312635/enable-powershell-remoting-with-credssp-using-group

After that is set up you would need to modify your invoke-command to be more like
Invoke-command –ComputerName TestPC1 –ScriptBlock {Start-Process "\\Server1\SharedApps\Adobe\InstallAdobeFlash.cmd"} –credential mydomain\nick -authentication credssp

Open in new window

However, I'm not 100% certain that calling start-process with the .CMD script will do what you want it to, but you'll find out!
0
 
LVL 40

Expert Comment

by:Subsun
ID: 39746579
Alternate way is to try with PsExec to execute the batch file..
http://ss64.com/nt/psexec.html
0

Featured Post

Free Tool: IP Lookup

Get more info about an IP address or domain name, such as organization, abuse contacts and geolocation.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

This script can help you clean up your user profile database by comparing profiles to Active Directory users in a particular OU, and removing the profiles that don't match.
A recent project that involved parsing Tableau Desktop and Server log files to extract reusable user queries for use in other systems. I chose to use PowerShell to gather the data, and SharePoint to present it...
Exchange organizations may use the Journaling Agent of the Transport Service to archive messages going through Exchange. However, if the Transport Service is integrated with some email content management application (such as an antispam), the admini…
In this video we outline the Physical Segments view of NetCrunch network monitor. By following this brief how-to video, you will be able to learn how NetCrunch visualizes your network, how granular is the information collected, as well as where to f…

734 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question