Invoke-command icacls on a remote machine

-

ok bit complicated explain try best 

i running powershell script machine has novell client installed causes issues setting windows file permissions on network share hosted on linux samba share. cant use get-acl errors not recognize unix users , groups. solution use icacls.

icacls not seem work form machine because of novel client

what want use invoke-command -computername server1 -script block{icacls.exe}-cred mydomain\me

but when access denied \\samba\share

so solution write text file on  server1 has scheduled task run every 5 minutes checks text file , if there text run command works fine messy if server down or task stop running task running same account mydomain\me

i remember reading awhile ago permission network share when using invoke command network share need credentials, these not passed on when using invoke command 

i thinking of using runas dont think can spefify password 

anyway still use invoke command know how can work



ok bit complicated explain try best 

i running powershell script machine has novell client installed causes issues setting windows file permissions on network share hosted on linux samba share. cant use get-acl errors not recognize unix users , groups. solution use icacls.

icacls not seem work form machine because of novel client

what want use invoke-command -computername server1 -script block{icacls.exe}-cred mydomain\me

but when access denied \\samba\share

so solution write text file on  server1 has scheduled task run every 5 minutes checks text file , if there text run command works fine messy if server down or task stop running task running same account mydomain\me

i remember reading awhile ago permission network share when using invoke command network share need credentials, these not passed on when using invoke command 

i thinking of using runas dont think can spefify password 

anyway still use invoke command know how can work



i'd guess problem credentials not being passed remote session.  have set credential delegation wsman?

http://msdn.microsoft.com/en-us/library/windows/desktop/ee309365(v=vs.85).aspx

http://technet.microsoft.com/en-us/library/hh849872.aspx



Windows Server  >  Windows PowerShell



Comments

Post a Comment

Popular posts from this blog

List Styles

-
in word 2010, defined new list style called “custom1′ “new docs based on template” instead of “this doc only.” heading 1, 2, 3, etc. appear linked within document. document create list style called “custom2′ , choose make available “new docs based on template” , also link them heading styles. though both list styles show available new docs, 1 of list styles (the last 1 used) linked heading styles. in word's default list library, multiple multi-level lists appear be linked heading styles. not able link heading styles multiple custom list styles? a particular list style can have 1 set of paragraph styles associated (one style each numbering level). the list formats in so-called list library behave differently, have noticed. similar predefined formats in bullets , numbering dialog box of word 97-2003. stefan blom, microsoft word mvp ...
Read more

DA client not sending packets - no IPSec?

-
this da server / client environment built in hyper-v mix of virtual , real networks. remote da client uses teredo , iphttps. can ping directaccess (dns servers) listed in nrpt, can ping internal statically configured native ipv6 addresses of internal resources, (2001:480:664a:e::/64) can ping nat64&dns64 addresses assigned da server internal ipv4 resources. (2001:480:664a:e:b733::/96) real dmz network, when attempts ping fqdn of server ipv address proven pingable, there no packet sent out nic (wireshark, promiscuous scanning).  message 'ping request not find host bobbysox.tidir.bctest.. please check name , try again.' again, da & internal dns servers still pingable remote client. if remote da client part of virtual dmz network, boots , communicates da server slew of isakmp messages before establishing ipsec , using esp. same addressing scheme, , connecting da client , external interface of da server real dmz network, ipsec never established, thou...
Read more

DFS Replication Setup Issue

-
i have windows 2008 r2 server environment.  forest , domain set windows 2008.  2 file servers windows 2008r2.  have created name space in domain , have 2 folder targerts on 2 file servers. when try configure replication error "the folloing folder targets cannot added dfs replication members.  click details more information." details: \\ servername \ sharename domain \ servername$ : windows nt 4.0 account name cannot converted qualifies distinguisedname on server.domain.local.  the name returned error. i have tried adding different share , adding folder targets fqdn , netbios name , same error.  can't seem find anyything in searches lead me fixing issue.  there nothing in event log.  cannot replication diagnostic since option not there in dfs managment. hi, as dfs namespace new created, can test recreate dfsr database see if help. you can stop , disable dfsr service on,  go <drive letter>:\sys...
Read more