PsExec optional switches

[Agent86]

Trying to figure how to pass the -h switch to a Run Program step which uses PsExec. I need to use this elevated token option in order to execute a batch file on the remote server.

[kinook]

We'll add support for that (poorly documented) flag to the request list. For now, you would need to call psexec directly from a Run Program step to include it.

[Agent86]

Thanks for the update!

[tomdom]

Do you have any idea if this switch will be added in the near future? Really need that -h switch. I am using the remote tab from "Run Program" action. Log Psexec output is checked on.

Thanks

[kinook]

Hopefully fairly soon, but no specific date at this time.

[deramor]

I agree, this is poorly documented. In fact, the Microsoft msdn page that describes the switches do not even list the -h switch.

Last updated 4/29/09
http://technet.microsoft.com/en-us/sysinternals/bb897553.aspx

The only way to know the switch exists is by asking PSExec its usage directly. In fact this was added in version 1.98 of PSExec. Users should make sure they are using a version that has this capability by asking it for the usage.

The workaround would be to use a the same run program action but to manually generate the command line yourself without using the remote tab. This is fine however you must know that if a password is required, it will not be encrypted. I have recently contacted support and they state this feature will be added in the next release. (currently using 7.7a)

[HippyCraig]

I'm just courious what does the -h flag do?

[kinook]

If the target system is Vista or higher, has the process run with the account's elevated token, if available.

[HippyCraig]

Interesting, do you have an links that detail this further, I know its not documented on MS site but maybe a user foroum. I couldnt find anything.

Do you have an example of how to use it?

[kinook]

The only place I'm aware of it being documented is when running PsExec without any switches and it outputs the usage. You just add -h to the command-line to use it.

[HippyCraig]

Thanks I see it now, I was running an older version of psexec. When I updated it I can see the -h switch listed in the usage.

[kinook]

This is available in v8.0.