PsExec optional switches

[Agent86]

Trying to figure how to pass the -h switch to a Run Program step which uses PsExec. I need to use this elevated token option in order to execute a batch file on the remote server.

[kinook]

We'll add support for that (poorly documented) flag to the request list. For now, you would need to call psexec directly from a Run Program step to include it.

[Agent86]

Thanks for the update!

[tomdom]

Do you have any idea if this switch will be added in the near future? Really need that -h switch. I am using the remote tab from "Run Program" action. Log Psexec output is checked on.

Thanks

[kinook]

Hopefully fairly soon, but no specific date at this time.

[deramor]

I agree, this is poorly documented. In fact, the Microsoft msdn page that describes the switches do not even list the -h switch.

Last updated 4/29/09
http://technet.microsoft.com/en-us/s.../bb897553.aspx

The only way to know the switch exists is by asking PSExec its usage directly. In fact this was added in version 1.98 of PSExec. Users should make sure they are using a version that has this capability by asking it for the usage.

The workaround would be to use a the same run program action but to manually generate the command line yourself without using the remote tab. This is fine however you must know that if a password is required, it will not be encrypted. I have recently contacted support and they state this feature will be added in the next release. (currently using 7.7a)

[HippyCraig]

I'm just courious what does the -h flag do?

[kinook]

If the target system is Vista or higher, has the process run with the account's elevated token, if available.

[HippyCraig]

Interesting, do you have an links that detail this further, I know its not documented on MS site but maybe a user foroum. I couldnt find anything.

Do you have an example of how to use it?