A required privilege is not held by the client

[jesus.paino]

Hello,

I have installed Advanced Host Monitor 7.20 in a VMware machine with Windows XP Pro.
All test works fine, but I have a ploblem with action Execute external program.

I have an error when I use it, the error is :
Sys Error: cannot execute command "XXXXXX". A required privilege is not held by the client.

And I see another error in system log :
Sys Log processing: Cannot execute external command. A required privilege is not held by the client.

I have installed HM as a service starting with a Domain Administrator account.

Can you help me?

[KS-Soft Europe]

Could you explain what exact program you are going to execute using "Execute External program" action?
Could you try to add prefix "cmd /c" to your command (e.g.: cmd /c your_program.exe)?
If you are trying to perform .vbs or .js script, you should add "cscript /B" or "cmd /c cscript /B" prefix to your command (e.g. cscript /B your_script.vbs)

Also I would suggest you to grant "Act as part of the operating system" privilege to the user, that is used to start HostMonitor/perform this script. You may assign "Act as part of the operationg system" for certain user using "Local Policies" applet ("Start" > "Run" > "Secpol.msc" > "Security Settings" > "User Rights Assignment" > "Act as part of the operating system"). Probaly, you will have to restart machine after applying changes.

Regards,
Max

[jesus.paino]

Hello Max,

I have done rights to "Act as part of the operating system" to the user that starts service.
I restart the system.
I have changed the command to cmd /c XXX.bat.

And ...
Sys Error: cannot execute command "cmd /c C:\HM_SCRIPTS\MOVE_MARPROD_ARCH.BAT". A required privilege is not held by the client.

I have logged with te same user, I try the command from start/run and it works...

[KS-Soft Europe]

I have logged with te same user, I try the command from start/run and it works...

Have you installed SP2 on your Windows XP system?
Do you see "Logged on as user Your_User_Name" message in the "Application" Event Log? If not, it means HostMonitor's was not able to login using provided credentials. probably some typo in password or username.
Could you try any other .bat file? Does it work with "Execute External program" action?

Could you also grant "Logon as service" privilege to the account, you have specified to start HostMonitor's service?

Regards,
Max

[jesus.paino]

-- I have Windows XP Pro SP2.

-- When service KS Hostmonitor starts I have :

In Aplication Log :
Logged on as user "SERVICE USER"

In Security Log :
Special privileges assigned to new logon:
User Name:
Domain:
Logon ID: (0x0,0xD9CE)
Privileges: SeChangeNotifyPrivilege
SeBackupPrivilege
SeRestorePrivilege
SeDebugPrivilege
A process was assigned a primary token.

-- When external program starts, I have in Security Log :
Assigning Process Information:
Process ID: 716
Image File Name: C:\WINDOWS\system32\services.exe
User Name: MACHINANAME$
Domain:
Logon ID: (0x0,0x3E7)
New Process Information:
Process ID: 1980
Image File Name: C:\Program Files\HostMonitor3\hostmon.exe
User Name: "SERVICE USER"
Domain:
Logon ID: (0x0,0xD9CE)

A new process has been created:
New Process ID: 2900
Image File Name: C:\WINDOWS\system32\cmd.exe
Creator Process ID: 2356
User Name: "SERVICE USER"

A process has exited:
Process ID: 2900
Image File Name: C:\WINDOWS\system32\cmd.exe
User Name: "SERVICE USER"

And the reported error in hostmonitor's system.log
The cmd starts but stop inmediatly.

-- The problem exists with any external program, BAT, CMD and HMS.
-- The user have "Logon as a service" and "Logon as a batch job".

[jesus.paino]

I have installed another "clean" Virtual Machine.

I have installed Hostmonitor 7.20 with your recommendations and I have the same problem.

Help!!

[KS-Soft Europe]

Sory, we cannot reproduce sucn a behavior. I would suggest you to crete a new user with an administrative rights and start HostMontor using this new user. Could you try that?

Regards,
Max

[jesus.paino]

The same problem starting service with other user

[jesus.paino]

I've done the following :

-- I changed the service to start as "Local system".
-- I changed the test in HostMonitor to "Connect as" the user with problems.
-- I changed the Action poperties / Execute by : "Test Performer".

And it works!!!

So it not seem a User rigths problem, one bug?

[KS-Soft Europe]

-- I changed the service to start as "Local system".

Where have you set the "Local system" accout - in "Options" -> "Service" tab or in windows "Services" applet for the "KS Advanced Host Monitor" service?

-- I changed the Action poperties / Execute by : "Test Performer".

What value was specified before your changes? "HostMonitor"? Some "RMA agent"?

And it works!!!

Glad to hear that!

So it not seem a User rigths problem, one bug?

Looks like some configuration error. We are unable to reproduce the problem.

Regards,
Max

[jesus.paino]

I have changed the user in windows "Services" applet for the "KS Advanced Host Monitor" service and the value was "Hostmonitor" before.

[KS-Soft Europe]

I have changed the user in windows "Services" applet for the "KS Advanced Host Monitor" service and the value was "Hostmonitor" before.

So, now "Local system" is specified in standard Windows "Services" applet for the "KS Advanced Host Monitor" service, right? Is "Allow service to interact with desktop" option enabled too? Domain Admins account is specified in "Options" -> "Service" tab, right? That is correct configuration. Please, read the following article for details: http://www.ks-soft.net/hostmon.eng/mfra ... tm#Service

and the value was "Hostmonitor" before.

Is the test pefrormed by HostMonitor or by RMA? If test is performed by HostMonitor, changing "HostMonitor" to "Test Performer" change nothing. However, if the test is performed by RMA, that's might be the cause.

Regards,
Max

[jesus.paino]

Thanks for the article, very good information.

I have change the actions for Hostmonitor again and it works.

I think that all is rigth now.

Thanks!!!

[KS-Soft Europe]

I think that all is rigth now.

Glad to hear that!

Regards,
Max

[canish]

Hi;

I am facing with the same situation, on HM v6.80 on windows 2003 Server. We are using execute external command for sms and also some scripts. Could you please send the solution step by step? I could not get it from your posts, so sorry


Thanks
Best Regards