?
Solved

Create/Deploy a custom event + view on W7 clients

Posted on 2014-04-17
7
Medium Priority
?
530 Views
Last Modified: 2014-04-29
On W7 clients, I need to create/deploy remotely a custom event to which  task is connected running as SYSTEM and with highest privileges. Additionally, I need to create remotely a custom view for this event. How can this be done via GP or script?

tia
0
Comment
Question by:GeologyETH
  • 4
  • 3
7 Comments
 
LVL 31

Expert Comment

by:merowinger
ID: 40006365
Event for Eventvwr or do you mean a schedules Task?
0
 

Author Comment

by:GeologyETH
ID: 40006518
I need to apply on remote W7 clients a scheduled task which is triggered by a custom event and which starts a script/program if the event appears. Additionally, a custom view for the custom event is needed on the clients.
0
 
LVL 31

Expert Comment

by:merowinger
ID: 40006569
Do you have any possibility to deploy that command to your Clients?
Group Policy, SCCM Server, ect.
If not you can do it manually on each Client from your Remote AdminPC with PSEXEC
http://technet.microsoft.com/de-de/sysinternals/bb897553.aspx

The command to create the Task is:
schtasks /create /TN "My Trigger" /RU SYSTEM  /TR "SomeAction.exe"  /SC ONEVENT /MO *[System/EventID=666]

Open in new window


With Psexec it would be like:
psexec \\Client1 "cmd /c schtasks /create /TN "My Trigger" /RU SYSTEM  /TR "SomeAction.exe"  /SC ONEVENT /MO *[System/EventID=177]"

Open in new window

0
Concerto's Cloud Advisory Services

Want to avoid the missteps to gaining all the benefits of the cloud? Learn more about the different assessment options from our Cloud Advisory team.

 

Author Comment

by:GeologyETH
ID: 40006651
I tried the schtasks cmd, but it seems that the /MO paramter doesn't work.

error: the specified channel could not be found. Check channel configuration.
(11,150):Subscription:<QueryList><Query><Select Path='(null)')*[System/EventID=10]</Select></Query></QueryList>
0
 

Author Comment

by:GeologyETH
ID: 40006743
ok, it works as

schtasks /create /TN "My Trigger" /RU SYSTEM /TR "SomeAction.exe" /SC ONEVENT /EC Application /MO *[Application/EventID=10]

Now, is there a possibility to enable "Run with highest privileges"?

Yes, I would like using a Group Policy.
0
 
LVL 31

Accepted Solution

by:
merowinger earned 2000 total points
ID: 40007101
Ok, i missed that Parameter.

SYSTEM (Local System) always has the highest privileges on a Client.

So you run it as a script, or how have you planned it?
0
 

Author Comment

by:GeologyETH
ID: 40029156
Sorry for the late reply. I think, I'll try to apply it by a script via GP. Custom views are stored in "C:\ProgramData\Microsoft\Event Viewer\Views\", so I'll create such a custom view for the custom events to and apply it by copying onto the clients.

Thank you for your help.
0

Featured Post

Independent Software Vendors: We Want Your Opinion

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

With User Account Control (UAC) enabled in Windows 7, one needs to open an elevated Command Prompt in order to run scripts under administrative privileges. Although the elevated Command Prompt accomplishes the task, the question How to run as script…
Unable to change the program that handles the scan event from a network attached Canon/Brother printer/scanner. This means you'll always have to choose which program handles this action, e.g. ControlCenter4 (in the case of a Brother).
This Micro Tutorial will give you basic overview of the control panel section on Windows 7. It will depth in Network and Internet, Hardware and Sound, etc. This will be demonstrated using Windows 7 operating system.
The Task Scheduler is a powerful tool that is built into Windows. It allows you to schedule tasks (actions) on a recurring basis, such as hourly, daily, weekly, monthly, at log on, at startup, on idle, etc. This video Micro Tutorial is a brief intro…
Suggested Courses

621 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question