14 Replies Latest reply on Mar 31, 2011 7:20 AM by mao

    Software distribution without Domain

    Rookie

      Hello,

      I'm trying to deploy a test package under my network using LDMS8.5...

      But I haven't Domain. All the computers are in a Workgroup.

       

      So, this is my configuration :

      - LDMS8.5 on Win Server 2003 SP1.

      - Computers on Win XP SP3.

      - All this people are in a Workgroup.

       

      I have made a script like this :

      REMCOPY1="\\server\scripts\test.exe" "c:\"

      REMEXEC1="c:\test.exe"

       

      I have an error when I try to execute this script, it say "Unable to write to the client" or anything like this.

       

      I have verified that the client have access to "\\server\scripts" and it's ok.

      I know that Landesk use the Admin Rights of his server to copy and run applications from the scripts.

       

      I try to make a script like this REMEXEC1="notepad.exe" and it work perfectly.

      My problem is to have the right from the Landesk server to the client computers.

       

      What can I do ?

       

      Thanks you in advance and sorry for this very bad english.

       

      Regards,

      Mao

        • 1. Re: Software distribution without Domain
          Asraf Radzi Apprentice

          hi mao,

           

          does the test.exe successfully copied to C: drive?

          • 2. Re: Software distribution without Domain
            Rookie

            Hi and thank you for your help :-)

            Unfortunally No, test.exe is not copied...

            Landesk say that he can't copy file to the client or anything like this.

            I'm sure this is an admin rights problem, but I don't know how to give the Computer's Admin Rights <=> to the Landesk Core Server.

            Is it possible to use Suftware Distribution under a Workgroup ?

            Regards

            • 3. Re: Software distribution without Domain
              Specialist

              You should be able to use software distribution to deploy a package in a workgroup.  Once the agent is installed on the workgroup, it should be able to use the system account to communicate with the core server.  Kinda curious as to why you are using script to deploy a package?

              • 4. Re: Software distribution without Domain
                Rookie

                Hi, and thank you for your reply !

                Well, let me explain what I'm trying to do.

                It's test purpose, I try to copy a file to the clients and after, executing this file.

                This is not really a package. 

                If what I'm doing can work, how to do it ?

                 

                Regards

                • 5. Re: Software distribution without Domain
                  Specialist

                  You are better off using provisioning template in the system configuration phase to do what you have described.  Add an action to map a drive using a supplied credential, add another action to copy the file from the map drive to the destination, add an execute action to excute the file.

                   

                  If you want to use scripts, you can use the net use to map a drive to the share location, then copy the file, then execute the file.  Using this method will leave the password exposed.

                   

                  You can also use software distribution to deploy a bat file and make the exetuable as the additional files, once deploy the bat file will run and call the executable

                  • 6. Re: Software distribution without Domain
                    Rookie

                    OK,

                    So I have made a TEST Shared Folder on the Landesk Server with "Everyone" have full access, just to try.

                    I have tried to Schedule a script like this :

                    REMEXEC1="\\server\test\test.exe"

                     

                    And an error occured, Unable to Execute at client, or a similar error...

                     

                    When I go on a computer, I try to have access on my test shared folder, I do Start->Run->\\server\test\ But he ask for credentials !

                    Why he ask for credentials ? I dont know why, because I have choosed "Everyone" and "Full Control" on the Test Folder, on the server.

                     

                    I'm going crazy ! If I give the credential to a computer to have access at my test shared folder, Landesk make another error like this :

                    Impossible to copy from/to the client.

                     

                    What is wrong ?

                    Regards

                    • 7. Re: Software distribution without Domain
                      Specialist

                      For a unc share not to prompt for username or password then you need to create a null session share, however that is a big security risk.

                       

                      http://www.experts-exchange.com/Operating_Systems/Windows_Server_2003/Q_21636950.html

                       

                      On the other hand you can create a virtual web share by going into your IIS web page and create a virtual directory and point it to the share folder.  That will allow anonymous read only access from a browser, then you can use the following line in your script.

                       

                      REMEXEC0=<qt/>%LDMS_CLIENT_DIR%\sdclient.exe<qt/> /f /o /p="http://servername/foldername/test.exe"

                       

                      or this

                       

                       

                      REMEXEC0=<qt/>%LDMS_CLIENT_DIR%\sdclient.exe<qt/> /f /o /dest="c:\test\test.exe" /p="http://servername/foldername/test.exe"

                      • 8. Re: Software distribution without Domain
                        mrspike SSMMVPGroup

                        No need to use provisioning, the issue most likely is that while users have access to the UNC share LANDesk runs as local system, and unless the machines have access to it, they will fail.

                         

                         

                        To test:

                         

                        If you have an XP system and in a command prompt your enter in

                        AT 12:00 /interactive cmd.exe

                        changing the time to a couple minutes ahead of the current time, this will open a command prompt running as the system account.

                         

                         

                        When that opens, see if you can use 'net use' command (Google if you need) to connect to the share.... odd are it will fail.

                         

                        The way around this is to use HTTP instead of UNC

                         

                        You can test this by copying your package to a new folder in the ldlogon folder on your core.

                         

                        The you would use

                         

                         

                        http://lyour_core_name/ldlogon/your_folder/package.exe

                        • 9. Re: Software distribution without Domain
                          Rookie

                          OK,

                          So I've tried your trick with the XP Scheduler.

                          I've do a Net Use after and the command seems to be accepted.

                          But when I try to access at the Network Drive created before, I have a "Bad username or password" error.

                           

                          I think I'm going to try with an HTTP Share.

                          • 10. Re: Software distribution without Domain
                            Rookie

                            I'm going crazy...!!!

                            I have made a Web Share in IIS.

                            From my client, the access to my server is good and works.

                            I've tried this : Start->Run->http://server/test/test.bat and it works like a charme.

                            But when I try to Schedule it in a Script in Landesk, it fails.

                            Error : Unable to execute at the client.

                             

                            What is the trick ?

                            Regards

                            • 11. Re: Software distribution without Domain
                              mrspike SSMMVPGroup

                              Is it copying the script?

                               

                              I do not use Manage script that often.  Do you have Software Dist?

                               

                               

                              The bottom link will take you to a Users Guide, it is for 8.8 but should be the same for this part, go look at pages 630 shows you the option in scripts

                               

                              Software Dist, might be easier if you have it.

                               

                              Also, I am not sure

                               

                               

                              I just looked at something...


                              In your original post you have:

                               

                              REMCOPY1="\\server\scripts\test.exe" "c:\"

                              REMEXEC1="c:\test.exe"

                               

                               

                              You at least need to add the file name in the destination, so it would look like:

                               

                              REMCOPY1="\\server\scripts\test.exe" "c:\test.exe"

                              REMEXEC1="c:\test.exe"

                               

                               

                               

                               

                               

                              Using batch files

                               

                              http://community.landesk.com/support/docs/DOC-2320

                               

                               

                               

                               

                              Users Guide

                               

                              http://community.landesk.com/support/docs/DOC-2548

                              • 12. Re: Software distribution without Domain
                                Rookie

                                Hi and thank you for your time.

                                I have made a mistake in my first post, sure my destination file is correct, sorry.

                                Landesk refuse to copy the file from the core server to the client.

                                Why ? I don't know. It's the same with HTTP.

                                I've make a full access in C: to everyone on a test machine client. Nothing changed.

                                From the client, I have access to the UNC share and the HTTP share without problem.

                                But Landesk make always the same error, in French this is : "Copie impossible depuis/vers client", "Copy is not possible from/to the client"...

                                The core server use his proper admin account to execute things on the client ?

                                If yes, the client does not recognize this account and refuse to let the core server copying the file ?

                                • 13. Re: Software distribution without Domain
                                  Jason SupportEmployee

                                  The core server use his proper admin account to execute things on the client ?

                                  No, the job is done by localsystem on the remote client, Localsystem by microsoft definition is in domain computers group. Since you are not in a domain you need to use a preferred server or anonymous webshare. It sounds like you have setup a webshare so lets continue to go down that path. Open the command prompt again as described by James earlier in this thread. Once it is open browse to the directory that IE is installed on your computer then launch iexplorer.exe this will launch IE as the localsystem account and not the logged in user account. Try to access and download your files in question. If they fail anonymous access is not working correctly.

                                   

                                  Jason

                                  • 14. Re: Software distribution without Domain
                                    Rookie

                                    I've do what you say, thanks ! :-)

                                    Access to the webshare is OK, i can download my test.bat, i can execute it... It works.

                                    If i try to access to the UNC pass, access is denied. This is because the client is not admin on the server, so it's normal.

                                     

                                    But when I try to Schedule my little script, it fail. Error , Unable to execute from the client / Unable to copy to the client...

                                     

                                    It's boring...