Welcome to OCS Inventory NG community support, where you can ask questions and receive answers from other members of the community.

Please ask questions only in English or French.

Release 2.11.1 available

The official documentation can be found on http://wiki.ocsinventory-ng.org. Read it before asking your question.

Runing 2.3.0 WindowsAgent without Admin user


I am wondering if it is possible to run client ocspackage.exe to collect and send data without having access to AD/local admin account?

I found in DOCO:

Launcher OcsLogon.exe can use the following command line parameters:

But even i have created package with /PACKAGER option - it doesnt start with normal user privilages (need to run it as a Administrator to start collecting / sending data)

How to solve it? Does UAC have something with it?

in OCS Inventory NG agent for Windows by (200 points)
retagged by

2 Answers

0 votes
I doubt you can install software using a normal account on a machine joined to a domain if no group policies authorize software installs. If you have domain admin credentials, you can either create a GPO with either a startup script for any domain authenticated user or use PSEXEC if remote admin shares are enabled:

psexec \\HOSTNAME -u DOMAIN\user -c -f c:\WINDOWS\system32\robocopy.exe "\\share\Path-to-OCSNG-Windows-Agent-" "C:\temp\OCS" OCS-NG-Windows-Agent-Setup.exe
psexec \\HOSTNAME -u DOMAIN\user -c -f c:\WINDOWS\system32\robocopy.exe "\\share\Path-to-OCSNG-Windows-Agent-" "C:\temp\OCS" cacert.pem
psexec \\HOSTNAME -s C:\temp\OCS\OCS-NG-Windows-Agent-Setup.exe /S /NOSPLASH /NO_SYSTRAY /NOW /ca="cacert.pem" /SERVER=http://ocshostname/ocsinventory
by (240 points)
0 votes
If you really want to make it work, you can use Process Monitor (https://technet.microsoft.com/en-us/sysinternals/processmonitor.aspx) to capture every location OCS needs write permissions (Registry, NTFS, Services) and give access to those locations to the user.
by (240 points)
Powered by Question2Answer