/build/static/layout/Breadcrumb_cap_w.png

KACE Product Support Question


Kace agent provisioning for remote computers

08/17/2020 225 views

Hi.

I have used PStools psexec to remotely enable WinRM on a few Windows test computers but am still seeing failed installations of the Kace agent. I am not seeing anything significant in the log file on the K1100 appliance. Has anyone pushed out the agent successfully over a VPN?


Thanks in advance,

James

0 Comments   [ + ] Show comments

Comments


All Answers

0

Hi James,

Can you post your script and your errors?  That would be helpful.

I have been able to push agents out over the VPN provided your VPN is setup so the machine doing the pushing is allowed to connect to the remote computer.

You can test if you have access from the deployment computer to the remote computer by trying the following:

  • Open \\Remotecomputer\admin$ to reach the remote computer's C:\Windows folder.  If you cannot then PSEXEC will not push the files over
  • If your install file is located on a server share you have to be sure Authenticated Users can access the share, because you are most likely trying to run PSEXEC with the -S switch (Use System Account) to install the agent.  The system account (computer) must be able to access the remote share so Domain User group access is not sufficient.
Answered 08/19/2020 by: JordanNolan
8th Degree Black Belt

  • Hi Jordan.
    I can access all admin shares on any computer. I did not think about the PSEXEC using -S and I can easily try that using share on a remote server or end point.
0

Hi James, it depends on how many computers you are attempting to install the client.

If you are connecting to a single computer that is VPN'd in: I would copy the install file to the local (VPN'd) machine and use psexec (or powershell) to run the installer. Making sure you have "admin" rights on the machine.


If you are attempting to do a push from Kace to install the client on multiple machines that could be tricky, I would attempt to wrap the whole package in a zip and run the bat file locally?

 VPN'd machines would be an issue due to network connectivity users disconnecting etc.., I have heard that people are starting to move/allow access directly from the internet (DMZ) to the Kace server for updates and installs, but I have not done much research on the possibilities.

Good luck

Russ

Answered 08/18/2020 by: osborn_russ
White Belt

Don't be a Stranger!

Sign up today to participate, stay informed, earn points and establish a reputation for yourself!

Sign up! or login

Share

 
This website uses cookies. By continuing to use this site and/or clicking the "Accept" button you are providing consent Quest Software and its affiliates do NOT sell the Personal Data you provide to us either when you register on our websites or when you do business with us. For more information about our Privacy Policy and our data protection efforts, please visit GDPR-HQ