A required privilege is not held by the client

[jesus.paino]

Hello,

I have installed Advanced Host Monitor 7.20 in a VMware machine with Windows XP Pro.
All test works fine, but I have a ploblem with action Execute external program.

I have an error when I use it, the error is :
Sys Error: cannot execute command "XXXXXX". A required privilege is not held by the client.

And I see another error in system log :
Sys Log processing: Cannot execute external command. A required privilege is not held by the client.

I have installed HM as a service starting with a Domain Administrator account.

Can you help me?

[KS-Soft Europe]

Could you explain what exact program you are going to execute using "Execute External program" action?
Could you try to add prefix "cmd /c" to your command (e.g.: cmd /c your_program.exe)?
If you are trying to perform .vbs or .js script, you should add "cscript /B" or "cmd /c cscript /B" prefix to your command (e.g. cscript /B your_script.vbs)

Also I would suggest you to grant "Act as part of the operating system" privilege to the user, that is used to start HostMonitor/perform this script. You may assign "Act as part of the operationg system" for certain user using "Local Policies" applet ("Start" > "Run" > "Secpol.msc" > "Security Settings" > "User Rights Assignment" > "Act as part of the operating system"). Probaly, you will have to restart machine after applying changes.

Regards,
Max

[jesus.paino]

Hello Max,

I have done rights to "Act as part of the operating system" to the user that starts service.
I restart the system.
I have changed the command to cmd /c XXX.bat.

And ...
Sys Error: cannot execute command "cmd /c C:\HM_SCRIPTS\MOVE_MARPROD_ARCH.BAT". A required privilege is not held by the client.

I have logged with te same user, I try the command from start/run and it works...

[KS-Soft Europe]

[jesus.paino]

-- I have Windows XP Pro SP2.

-- When service KS Hostmonitor starts I have :

In Aplication Log :
Logged on as user "SERVICE USER"

In Security Log :
Special privileges assigned to new logon:
User Name:
Domain:
Logon ID: (0x0,0xD9CE)
Privileges: SeChangeNotifyPrivilege
SeBackupPrivilege
SeRestorePrivilege
SeDebugPrivilege
A process was assigned a primary token.

-- When external program starts, I have in Security Log :
Assigning Process Information:
Process ID: 716
Image File Name: C:\WINDOWS\system32\services.exe
User Name: MACHINANAME$
Domain:
Logon ID: (0x0,0x3E7)
New Process Information:
Process ID: 1980
Image File Name: C:\Program Files\HostMonitor3\hostmon.exe
User Name: "SERVICE USER"
Domain:
Logon ID: (0x0,0xD9CE)

A new process has been created:
New Process ID: 2900
Image File Name: C:\WINDOWS\system32\cmd.exe
Creator Process ID: 2356
User Name: "SERVICE USER"

A process has exited:
Process ID: 2900
Image File Name: C:\WINDOWS\system32\cmd.exe
User Name: "SERVICE USER"

And the reported error in hostmonitor's system.log
The cmd starts but stop inmediatly.

-- The problem exists with any external program, BAT, CMD and HMS.
-- The user have "Logon as a service" and "Logon as a batch job".

[jesus.paino]

I have installed another "clean" Virtual Machine.

I have installed Hostmonitor 7.20 with your recommendations and I have the same problem.

Help!!

[KS-Soft Europe]

Sory, we cannot reproduce sucn a behavior. I would suggest you to crete a new user with an administrative rights and start HostMontor using this new user. Could you try that?

Regards,
Max

[jesus.paino]

The same problem starting service with other user

[jesus.paino]

I've done the following :

-- I changed the service to start as "Local system".
-- I changed the test in HostMonitor to "Connect as" the user with problems.
-- I changed the Action poperties / Execute by : "Test Performer".

And it works!!!

So it not seem a User rigths problem, one bug?

[KS-Soft Europe]

[jesus.paino]

I have changed the user in windows "Services" applet for the "KS Advanced Host Monitor" service and the value was "Hostmonitor" before.

[KS-Soft Europe]

[jesus.paino]

Thanks for the article, very good information.

I have change the actions for Hostmonitor again and it works.

I think that all is rigth now.

Thanks!!!

[KS-Soft Europe]

[canish]

Hi;

I am facing with the same situation, on HM v6.80 on windows 2003 Server. We are using execute external command for sms and also some scripts. Could you please send the solution step by step? I could not get it from your posts, so sorry


Thanks
Best Regards