Ghost Solution Suite

 View Only
  • 1.  What user does a Ghost Console task run as?

    Posted Dec 29, 2011 04:22 PM

    My intentions are to use the Symantec Ghost Console/Tasks (along with the "Software and File Actions) to copy the "test.bat" file that contains the following:

     
    psexec -u "DOMAIN\DOMAIN USER" -p "PASSWORD" -c -f "c:\Program Files\Symantec\Ghost\robocopy.exe" "C:\Documents and Settings\%username%\Application Data\Microsoft\Outlook" "\\SERVER SHARE\User Profiles\%username%\Application Data" /E /Z /R:0 /W:5
     
    And copy the "psexec.exe" and "Robocopy.exe" to the same folder (C:\Program Files\Symantec\Ghost), then execute "test.bat.
     
    This works if I click on the "test.bat" file myself once it has been transferred, but I get the following error when I leave it up to the Ghost Console to run it for me:
     
    PsExec could not start C:\Program Files\Symantec\Ghost\robocopy.exe: Access is denied.


  • 2.  RE: What user does a Ghost Console task run as?

    Posted Dec 29, 2011 05:02 PM

    Your question about which user runs a Ghost Console task has already been answered by Nigel Bree in your earlier thread here:

    https://www-secure.symantec.com/connect/forums/custom-robocopy-batch-file-backup-user-profile

    However, the access denied message may be due to the antivirus program on the target system as psexec is one of the pstools that is often recognised as malware by virus checkers (eg Sophos).

    I suggest you check the A/V logs and the event log on the target machine in case they have more pertinent information, or try with the A/V uninstalled on a test machine.

    If this is not the issue, then try setting the destination of your robocopy command to a local folder on the hard disk as a test. This will establish whether the issue is over network access or not.



  • 3.  RE: What user does a Ghost Console task run as?

    Posted Dec 30, 2011 05:44 AM

    I have already removed AV so we know it's not that, and I changed the destination to "C:\TEST" but it still throws an "Access denied" message. Again these batch files run fine when ran manually.



  • 4.  RE: What user does a Ghost Console task run as?

    Posted Dec 30, 2011 01:07 PM

    I would recommend adding commands to your batch files which will dump the environment variables to a text file so you can see what the localsystem account perceives.

    eg SET > c:\temp\environment.txt



  • 5.  RE: What user does a Ghost Console task run as?

    Posted Mar 09, 2012 12:02 PM

    I tried installing software with a command line and I noticed that unless specified, it will run as the user that is logged on.

     

    I installed Adobe Flash player remotely with no user intervention and was able to call msiexec.exe without admin rights.

     

    Not sure if this will help you but the command is below if it comes in handy......

    c:\windows\system32\msiexec.exe /i "c:\install_flash_player_10_active_x.msi /qb



  • 6.  RE: What user does a Ghost Console task run as?

    Posted Mar 14, 2012 05:57 PM

    Flash Player is an ActiveX control and as such will install into the user's profile without needing permissions elevation. Try it with Adobe Reader and you may find that the installation will not proceed without the equivalent of Admin rights - and of course Win 7 UAC adds another layer of complexity over XP which does not have UAC.