After lot of testing, I found the solution: after deleting the psexec.exe from folder
C:\Program Files (x86)\OCS Inventory Agent\Plugins the problem was solved !!
In addition, deployments were no longer staying in status NOTIFIED.
I was confused with the documentation on http://wiki.ocsinventory-ng.org/index.php/Documentation:WindowsAgent
Basically to deploy the OCS Inventory Windows Agents, in the SERVICE version ! , using a startup script inside a GPO, there are 2 methods:
1) using launcher OcsLogon.exe together with the agent deploy package OcsPackage.exe, that was created using tool OcsPackager.exe. This is done in the Computer Configuration section of the GPO : as a startup script.
Note: a special case is the section "Deploying or running Agent through login script", where OcsLogon is used from a shared folder, to launch the standalone agent (not as a service). This is basically a login script, and has to run as a user with administrator rights. We are not considering this further.
2) using the PSEXEC or "OCS Inventory NG Agent Deployment Tool" to push the OCS Inventory NG Agent.
(the word "or" could be misleading; better would be "scripts using PSEXEC" )
Using PSEXEC is the simplest form : using command PSEXEC in a script, to directly launch OCS-NG-Windows-Agent-Setup.exe , with the necessary options. PSEXEC being used to allow running the setup using an account with the proper permissions.
Note: a variant on (2) is by using "OCS Inventory Agent Deployment Tool", which is a GUI to install at an administator's workstation, and which is used to push the clients to a selected group of hosts or hosts on a given IP address range (still using PSEXEC.EXE).
Additional info on method (1) :
When launching the OcsPackager.exe, while PsExec.exe is NOT present in the same folder, a warning message is popping up "Using alternate account to launch setup requires Microsoft SysInternals <PsExec.exe> tool." --> Click [No] to accept (!) disable installing under alternate account.
In fact the installation is running with the GPO startup script account "Local System". No need for PsExec.exe.
After the installation, the service OCS Inventory Service is running with this account.
I use a separate script to change this to a specific domain "DeployServiceAccount" , which has the User Rights Assignment :
- Act as part of the operating system
- Log on as a batch job
- Log on as a service
These are set from the Default Domain Policy > Computer Configuration > Policies> Windows Settings > Security Settings > Local Policies > User Rights Assignment