Sysinternals Homepage
Forum Home Forum Home > Sysinternals Utilities > PsTools
  New Posts New Posts RSS Feed: Guide for enabling PsExec on VISTA
  FAQ FAQ  Forum Search   Calendar   Register Register  Login Login

Guide for enabling PsExec on VISTA
 Post Reply Post Reply
Author
Message
  Share Topic Share Topic  Topic Search Topic Search  Topic Options Topic Options
Johannes View Drop Down
Newbie
Newbie


Joined: 05 December 2006
Location: Germany
Online Status: Offline
Posts: 1 		Post Options Post Options   Quote Johannes Quote  Post ReplyReply Direct Link To This Post Topic: Guide for enabling PsExec on VISTA
    Posted: 05 December 2006 at 8:30am

Hi all,

I recently saw some posts describing issues with Windows Vista and PsExec. I have tried since a while to get it up and running and believe I finally got the answers :)

1. I am running Windows Vista Ultimate RTM (not sure if other Vista Editions are supported as well, i.e. XP Home was not supported for PsExec)

2. You have to check all the minimum requirements posted in this forum at http://forum.sysinternals.com/forum_posts.asp?TID=3748&P N=1 

3. In gerneral on Ultimate everything is enabled except of Network discovery and file sharing. Go to Network > Network and Sharing Center and fully enable "Network Discovery", "File Sharing" and "Public Folder Sharing"

4. If you turn this on, the Firewall settings should be appropriate, but double-check that there is File and Printer sharing enabled. On my systems I did not need to open any ports for the Firewall.

5. Now here comes the tricky part: User permissions and privileges significantly changed in Vista with the "UAC - User Account Control". That said, I wasn't able at all to remotely connect to Vista with a local admin account from my domain XP machine.

What I did was:

  • Add both machines to the same domain (I have no idea if it works if they are in the same Workgroup, I simply didn't tried this out)
  • Add a domain user as local Administrator to the target-machine
  • Use this domain user account for connecting with PsExec
  • If your local machine is a Vista box (!!!) run the Command Prompt for executing PsExec as administrator (right click > Run as administrator), otherwise connection may fail
  • Use domain\user syntax for authentication on command-line, i.e.: psexec.exe \\target-machine -u domain\user -p password -s cmd

With these steps I am now able to connect succesfully from XP to Vista and from Vista to Vista.

Hope this helps all the people who were wondering if PsExec were going to support Windows Vista and have been kind of frustrated like I was.

If someone is testing the connection within a workgroup rather than domain, please post. I would be interested in the results.

Happy connecting!
Johannes
Back to Top
egbnt View Drop Down
Newbie
Newbie


Joined: 07 December 2006
Location: United States
Online Status: Offline
Posts: 6 		Post Options Post Options   Quote egbnt Quote  Post ReplyReply Direct Link To This Post Posted: 07 December 2006 at 11:04am
I have followed all the suggestions, but running PSExec from XP/SP2 to VISTA produces the following error messages. (Administrator account is enabled and has a password on VISTA):

c:\egb>psexec \\192.168.1.10 -u egbt60b\administrator cmd.exe

PsExec v1.72 - Execute processes remotely
Copyright (C) 2001-2006 Mark Russinovich
Sysinternals - www.sysinternals.com

Password:

Error communicating with PsExec service on 192.168.1.10:
More data is available.


and when I use a user account that is in the Administrators group:

c:\egb>psexec \\192.168.1.10 -u egbt60b\egb cmd.exe

PsExec v1.72 - Execute processes remotely
Copyright (C) 2001-2006 Mark Russinovich
Sysinternals - www.sysinternals.com

Password:
Couldn't access 192.168.1.10:
Access is denied.

I can net use a drive both from and to VISTA. There are no domains in this picture. Ideas?

Ed
Back to Top
egbnt View Drop Down
Newbie
Newbie


Joined: 07 December 2006
Location: United States
Online Status: Offline
Posts: 6 		Post Options Post Options   Quote egbnt Quote  Post ReplyReply Direct Link To This Post Posted: 07 December 2006 at 11:31am
Ok, I've changed my mind. Everything works.

psexec -s cmd
works. I simply configured the properties of psexec (1.73) as "run as administrator".

psexec -s cmd works on VISTA and XP
psexec \\192.168.1.10 -s cmd works from XP to VISTA and from
VISTA to XP.

All seems well.

Ed
Back to Top
telia View Drop Down
Newbie
Newbie


Joined: 10 June 2008
Location: Ukraine
Online Status: Offline
Posts: 2 		Post Options Post Options   Quote telia Quote  Post ReplyReply Direct Link To This Post Posted: 10 June 2008 at 2:54am
Hi there,

does anything changed recently about psexec and Vista friendship?

I'm receiving "access denied" when trying to run "psexec \\vista -u admin -p admin cmd" from XP when "admin" is admin on both XP and Vista and they are in the same workgroup. The same about "psexec \\vista -s cmd". Will anything change if I'll add vista to domain and will try to use psexec with domain admin rights?

What changes in Vista is required for "psexec \\vista -s cmd"? I enabled file sharing etc.

Thank you,
Andriy



Edited by telia - 10 June 2008 at 2:57am
Back to Top
molotov View Drop Down
Moderator Group
Moderator Group
Avatar

Joined: 04 October 2006
Online Status: Offline
Posts: 17492 		Post Options Post Options   Quote molotov Quote  Post ReplyReply Direct Link To This Post Posted: 10 June 2008 at 3:22am
Hi Andriy,
 
Have you seen the following topics?
 
The faq mentions the following that may be of interest:
PsExec from Vista to Vista, can it be done?

You wonder whether you may have any success using psexec from one Vista computer to another Vista computer? Maybe setting LocalAccountTokenFilterPolicy=1 will do the trick? Please read psexec from vista to vista.
Daily affirmation:
net helpmsg 4006
Back to Top
telia View Drop Down
Newbie
Newbie


Joined: 10 June 2008
Location: Ukraine
Online Status: Offline
Posts: 2 		Post Options Post Options   Quote telia Quote  Post ReplyReply Direct Link To This Post Posted: 10 June 2008 at 9:03am
Yeah, thank you for the links, I read them but looks like I'm completely lost. E.g. setting LocalAccountTokenFilterPolicy=1 was suggested for Vista-to-Vista problem but I cannot pass XP-to-Vista case.

I need to install some app remotely on domain PCs from w2k3 server and I have domain admin rights. Can I do this for Vista PC w/o any specific/atypical settings on Vista?

~andriy
Back to Top
molotov View Drop Down
Moderator Group
Moderator Group
Avatar

Joined: 04 October 2006
Online Status: Offline
Posts: 17492 		Post Options Post Options   Quote molotov Quote  Post ReplyReply Direct Link To This Post Posted: 10 June 2008 at 9:12am
but I cannot pass XP-to-Vista case
Yes, it was suggested for Vista-to-Vista.  But I wonder if it will work for XP (or other OS)-to-Vista as well (make the change on the Vista system).
See the following for evidence:


Edited by molotov - 10 June 2008 at 9:17am
Daily affirmation:
net helpmsg 4006
Back to Top
mark.emery View Drop Down
Newbie
Newbie
Avatar

Joined: 24 February 2009
Online Status: Offline
Posts: 1 		Post Options Post Options   Quote mark.emery Quote  Post ReplyReply Direct Link To This Post Posted: 24 February 2009 at 2:42am
I have PSEXEC sort of working Vista-to-Vista, my account account is a member of the domain admins and that group is a member of the local administrators as expected. When I use the command PSEXEC \\XXXXX  CMD
 
I get a command prompt running under my context on the remote machine and commands work fine. However, I have no network access to anything. A NET VIEW command will get access denied to a server with shares that have everyone access.
 
If I used the command PSEXEC -s \\XXXXX CMD
as suggested here, I get the system context and can do a NET VIEW command, but I need my context to run the MSIEXEC command to do a remote install.
 
How do I get system access under my context? The remote UAC is disabled as per the articles linked to here, that didn't change anything with this problem.
 
Any idea what mechanisam is stopping network access from a PSEXEC session?
Back to Top
molotov View Drop Down
Moderator Group
Moderator Group
Avatar

Joined: 04 October 2006
Online Status: Offline
Posts: 17492 		Post Options Post Options   Quote molotov Quote  Post ReplyReply Direct Link To This Post Posted: 24 February 2009 at 3:11am
Hi Mark,

Sounds like you may wish to review this item from the PsTools FAQ:
PsExec: What is the difference between implicit authentication and explicit authentication?

You wonder why does psexec behave differently if it has been launched without the -u user -p passw arguments than it does if launched with the -u user -p passw arguments?
Please read psexec - remote share problem in order to learn why.
Daily affirmation:
net helpmsg 4006
Back to Top
 Post Reply Post Reply

Forum Jump Forum Permissions View Drop Down