Hi there.

Here's my situation. I have Win7 system thats in a workgroup which needs to run a .exe from a shared that's protected by Active Directory authentication. I have small .bat file on the local system which maps a coupe of network drives, before launching the app.

I've tried using a local user account - and this seems to work okay:

paexec /u localusername c:folderbatchfile.bat

but when i use a domain account it fails. It says "Logon failure: unknown username or bad password. PAexec returning exit code -3"

Is this a support usage? If it is supported where I am going wrong?

asked 07 Jan '20, 07:11

michelle_laverick's gravatar image

michelle_lav...
11112
accept rate: 0%


Hi there. Having played with microsoft psexec and paexec what I've discovered is the source Windows system is in workgroup, and the account specified at the command-line is domain authentication fails.

There are two work arounds. If I make a username/password on the local machine, match the username/password of the domain it works - and avoid me having to join the workgroup'd machine to my AD domain. That works fine where organizations are happy to 'tunnel' users thru a single userID with a password that never changes and is set to expire...

To be able to use any account in the AD, I found I had no choice to add the workgroup machine to the domain. I can still log in locally using local account, and then specify an AD domain user using the domainusername syntax.

It does look to be the case that for psexec and paexec to work, a trust relationship must exist between the workstation and the domain...

Best Wishes Michelle

link

answered 16 Jan '20, 05:20

michelle_laverick's gravatar image

michelle_lav...
11112
accept rate: 0%

Hi Michelle,

We use PAExec with domain user accounts all the time without issue. Are you sending the full domain name and password? Can you provide us with the command line that you are using (of course you should change the user name and password)?

The message that you are getting comes from Windows, so there isn't a lot that we can do.

Thanks
Quinn

Please make sure to mark your questions accepted when you have your answer by clicking the gray checkmark to the left of the answer.

link

answered 07 Jan '20, 11:33

Quinn's gravatar image

Quinn ♦♦
14.4k3925
accept rate: 35%

Thanks for your responses....

this is the syntax I'm using

paexec /u:corpusername c:\folder\mybatchfile.bat

link

answered 07 Jan '20, 13:42

michelle_laverick's gravatar image

michelle_lav...
11112
accept rate: 0%

edited 07 Jan '20, 14:13

Quinn's gravatar image

Quinn ♦♦
14.4k3925

Michelle,

The format of your command line doesn't look correct. For example, you are using "/u" and it should be "-u". It also looks like you aren't passing the password to be used. Try adding it to see if it works.

Here is the command-line usage. Usage: PAExec [\computer[,computer2[,...]] | @file] [-u user [-p psswd]|[-p@ file [-p@d]]] [-n s] [-l][-s|-e][-x][-i [session]][-c [-f|-v] [-csrc path]] [-lo path][-rlo path][-ods][-w directory][-d][-][-a n,n,...] [-dfr][-noname][-to seconds] cmd [arguments]

PAexec: https://www.poweradmin.com/paexec/

Thanks
Quinn

Please make sure to mark your questions accepted when you have your answer by clicking the gray checkmark to the left of the answer.

link

answered 07 Jan '20, 14:27

Quinn's gravatar image

Quinn ♦♦
14.4k3925
accept rate: 35%

Your answer
toggle preview

Follow this question

By Email:

Once you sign in you will be able to subscribe for any updates here

By RSS:

Answers

Answers and Comments

Markdown Basics

  • *italic* or _italic_
  • **bold** or __bold__
  • link:[text](http://url.com/ "title")
  • image?![alt text](/path/img.jpg "title")
  • numbered list: 1. Foo 2. Bar
  • to add a line break simply add two spaces to where you would like the new line to be.
  • basic HTML tags are also supported

Tags:

×9
×3

Asked: 07 Jan '20, 07:11

Seen: 67,388 times

Last updated: 16 Jan '20, 05:20