Link to home
Start Free TrialLog in
Avatar of spencerturbine
spencerturbine

asked on

WMIC process call create ReturnValue = 3 problem

When using WMIC to remotely query two windows 2003 domain controllers, I cannot use proccess call create "name.exe". I can list processes and terminate them with out issue.

The results of using process call create shown below:

C:\Windows>wmic /node:"dc1"  /user:Administrator /password:password123 process call create "calc.exe"
Executing (Win32_Process)->Create()
Method execution successful.
Out Parameters:
instance of __PARAMETERS
{
        ReturnValue = 3;
};

I have been my Google searches have not turned up anything useful so far.

Anyone have any suggestions as to how I might troubleshoot this problem?
Avatar of Gerwin Jansen
Gerwin Jansen
Flag of Netherlands image

Any chance that "name.exe" is not on the path? "Calc.exe" is so that will start.

Can you try adding the full path to "name.exe"?
Avatar of spencerturbine
spencerturbine

ASKER

I have tried calc.exe and c:\windows\system32\calc.exe and I get the same results.
calc is working, but you want name.exe to work, right?
No calc returns error 3
Then I misunderstood this part:

"Method execution successful."
Well the call was successful, but the command executed as a result of the call reported an error.
C:\Users\me>wmic /node:mypc process call create calc.exe
Executing (Win32_Process)->Create()
Method execution successful.
Out Parameters:
instance of __PARAMETERS
{
        ProcessId = 1744;
        ReturnValue = 0;
};

Open in new window


I got a calc.exe that opened just fine.
Yes I can do this on my  own machine as well as many domain workstations. But I cannot successfully run the command on the two domain controllers.

Which is the intended purpose. (Not to run calc.exe, but to execute another command I have ready. Calc.exe is being used to simplyfly troubleshooting)
I don't have a domain server to test with so my contribution ends here...
OK Thanks!
ASKER CERTIFIED SOLUTION
Avatar of spencerturbine
spencerturbine

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
I really thought I had it there but no joy. I still get the error code 3 for insufficient privileges!
Did you try with domain admin credentials, like this:

/user:your_domain\your_domain_admin /password:your_domain_admin_password
Yes I did try the /user:DOMAIN\Administrator

The only way I got this to work was to add the Administrators group to the "Replace a process level token" user right.

I am hoping someone could shed some light on this so I don't have to set up a test 2003 domain just to see what the default user rights are because I have never seen anyone explain the potential for this command to fail because the "Replace a process level token" user right did not contain the Administrators group.
>> so I don't have to set up a test 2003 domain
Can help you there I'm afraid.
Ultimately this was the reason why I was not able to complete the command.