Image
 
linkedin_logo.png rss_logo.jpg
twitter_logo.png youtube_logo.jpg
Latest Additions
 
EH-Net Login
Welcome Guest.






Lost Password?
No account yet? Register
Who's Online
We have 39 guests and 1 member online
 
Free Business and Tech Magazines and eBooks

You are here: Home arrow Resourcesarrow Toolsarrow Remote deployment tools
EH-Net
May 23, 2013, 12:44:18 PM *
Welcome, Guest. Please login or register.
Did you miss your activation email?

Login with username, password and session length
News: Go back to The Ethical Hacker Network Online Magazine Home Page
 
   Home   Help Calendar Login Register  
Pages: [1]   Go Down
  Print  
Author Topic: Remote deployment tools  (Read 1580 times)
0 Members and 1 Guest are viewing this topic.
Hack_80
Jr. Member
**
Offline Offline

Posts: 86


Black buck


View Profile
« on: March 16, 2013, 02:14:35 AM »

Hi..
Currently got frustrated with PSexec which fails on Windows 2008 server for remote deployment.
looking for free remote deployment tools which work on multiple Microsoft platforms...

Suggestions pls...

Thnks

Logged
ajohnson
Recruiters
Hero Member
*
Offline Offline

Posts: 1057


aka dynamik


View Profile WWW
« Reply #1 on: March 16, 2013, 08:44:56 AM »

Group Policy?

http://support.microsoft.com/kb/816102
Logged

WIP: GCFA | www.infosiege.net | @infosiege

The day you stop learning is the day you start becoming obsolete.
m0wgli
Full Member
***
Offline Offline

Posts: 248


View Profile
« Reply #2 on: March 16, 2013, 09:02:40 AM »

PsExec should still work on Windows Server 2008, although if UAC is enabled it'll change the way you run PsExec.

What is the problem you are having?

Windows Powershell can also be used for remote installs.
Logged

Security + | OSWP | eCPPT | CSTA
Hack_80
Jr. Member
**
Offline Offline

Posts: 86


Black buck


View Profile
« Reply #3 on: March 17, 2013, 01:19:35 PM »

I am trying to deploy the registry settings on windows 2008 server remotely..
While executing thru PSEXEC from any windows xp or 2008 server it shows access denied...

created a batch file as below

@echo on
net use p: \\x.x.x.x\foldername
copy p:\xyz.reg c:\
reg import c:\xyz.reg
net use p: /delete
exit
Logged
m0wgli
Full Member
***
Offline Offline

Posts: 248


View Profile
« Reply #4 on: March 17, 2013, 04:13:55 PM »

Assuming you have an up to date version of PsExec.

If you try running PsExec from an elevated cmd prompt (using administrative credentials for the remote system) and use the -h parameter do you still get access denied?

Code:
-h         If the target system is Vista or higher, has the process
           run with the account's elevated token, if available.

Logged

Security + | OSWP | eCPPT | CSTA
ajohnson
Recruiters
Hero Member
*
Offline Offline

Posts: 1057


aka dynamik


View Profile WWW
« Reply #5 on: March 17, 2013, 05:19:51 PM »

If all you're doing is registry changes, just use group policy: http://technet.microsoft.com/en-us/library/cc753092.aspx

That's much easier to manage.
Logged

WIP: GCFA | www.infosiege.net | @infosiege

The day you stop learning is the day you start becoming obsolete.
m0wgli
Full Member
***
Offline Offline

Posts: 248


View Profile
« Reply #6 on: March 17, 2013, 05:50:14 PM »

If all you're doing is registry changes, just use group policy: http://technet.microsoft.com/en-us/library/cc753092.aspx

That's much easier to manage.

+1



Logged

Security + | OSWP | eCPPT | CSTA
Hack_80
Jr. Member
**
Offline Offline

Posts: 86


Black buck


View Profile
« Reply #7 on: March 17, 2013, 11:33:01 PM »

My approach for GPO was primary but due to mix environment of servers ( Windows 2003, 2008) in same OU which is making tough time..
My only target is windows 2008.. also i am using psexec 1.98 version.

Thanks
Logged
ajohnson
Recruiters
Hero Member
*
Offline Offline

Posts: 1057


aka dynamik


View Profile WWW
« Reply #8 on: March 18, 2013, 09:20:50 AM »

Ah, maybe try WMI filtering then: http://technet.microsoft.com/en-us/library/cc779036(v=ws.10).aspx

That might help if all the target systems share a common attribute.
Logged

WIP: GCFA | www.infosiege.net | @infosiege

The day you stop learning is the day you start becoming obsolete.
Hack_80
Jr. Member
**
Offline Offline

Posts: 86


Black buck


View Profile
« Reply #9 on: March 21, 2013, 11:25:53 PM »

Tried appying WMI filter on GPO for windows 2008 platforms
Please help me to verify the below query is incorrect

Select * from Win32_operatingsystem Where (caption Like "microsoft Windows server 2008%)
Select * from Win32_operatingsystem where version like "6.1%" and (producttype = "1" or producttype = "3")



thanks
« Last Edit: March 22, 2013, 01:07:01 AM by Hack_80 » Logged
m0wgli
Full Member
***
Offline Offline

Posts: 248


View Profile
« Reply #10 on: March 22, 2013, 04:18:08 AM »

Try:

Code:
select * from Win32_OperatingSystem WHERE Caption LIKE "%Server 2008%"

ProductType 1 is for Client OS, If you're targeting Domain Controllers (2) and Member Servers (3):

Code:
select * from Win32_OperatingSystem WHERE Version LIKE "6.1%" AND ( ProductType = "2" or ProductType = "3" )

The above can be shortened to:

Code:
select * from Win32_OperatingSystem WHERE Version LIKE "6.1%" and ProductType <> "1"
« Last Edit: March 22, 2013, 04:22:49 AM by m0wgli » Logged

Security + | OSWP | eCPPT | CSTA
Pages: [1]   Go Up
  Print  
 
Jump to:  

Powered by MySQL Powered by PHP Powered by SMF 1.1.18 | SMF © 2013, Simple Machines
Joomla Bridge by JoomlaHacks.com
Valid XHTML 1.0! Valid CSS!
Page created in 0.092 seconds with 23 queries.
 
Exclusive Deal

sansfire13_245x90_cw90.jpg
SANSFIRE 2013
June 15 - 22

5% Off w/ Code: EHN_5

SANS Deals 4 EH-Netters
5% OFF Any SANS Course in Any Format!
Coupon Code: EHN_5 Including SANS Rocky Mountain 2013 & SANS Boston 2013
Polls
Compared to this year, 2013 will be:
 
Recent Forum Topics
EH-Net News Feeds
Latest Additions
 
         
Advertisement

© 2013 The Ethical Hacker Network
Joomla! is Free Software released under the GNU/GPL License.