Need a way through file transfer

Welcome Forums General PowerShell Q&A Need a way through file transfer

This topic contains 0 replies, has 1 voice, and was last updated by  J A M 2 weeks, 1 day ago.

  • Author
    Posts
  • #127085

    Participant
    Points: 11
    Rank: Member

    Trying to copy log files off of systems to a remote share with a constrained Just Enough Administration (JEA) endpoint.  Looking for a way to work around the wall I've now hit.

    Background:

    1. First tried to use gMSA – but then found the environment this was to run in, the DC's were only 2008r2
    2. Second, create a Scheduled task to run under the system account to do the copy as it's a domain joined System

    Worked, until newer security patches were applied which seem to blow out ability to use scheduled task module in an approved script being run by a constrained user

    Attempted to sign the script and have it run, still no joy, same error message about scheduledtask module needing full language mode while calling user is in constrained.

    Posting of Script and error:

    https://social.technet.microsoft.com/Forums/en-US/b3d92491-bfff-4060-9df9-e7b8d6b0a8d4/jea-calling-scheduled-task-in-a-script-now-fails?forum=winserverpowershell

    I think this is where it was clobbered: https://blogs.msdn.microsoft.com/powershell/2017/11/02/powershell-constrained-language-mode/    System developing this on apparently only had patched up-to April...

    even though the scheduledtask module wasn't supposed to be clobbered.

    Hope to find some help or guidance on what to try from here.

     

    Thanks,

    James

You must be logged in to reply to this topic.