Deployment Solution

 View Only
  • 1.  How can I robocopy from server to client without explicit credentials?

    Posted Jun 23, 2016 08:48 AM

    Hello,

    I have a server with 6.9 SP5 MR1 with some directories that are copied to workstations during a Windows image deployment.

    I would like to create a job to update these local directories with the latest content available in the server.

    The restrictions are:

    - I need to maintain files in the clients that aren't in the server (i.e. local log files)

    - I need to update/change the same files for the new versions in the server

    - I need to add new files in the server to the clients

    So my idea is to use ROBOCOPY application and /MIR switches excluding log files and directories ...

    But I don't want to have a NET USE drive: \\server\express command in the script but trying to use some kind of agent to server connection not available to users, not placed on an script in the system TEMP folder for security purposes.

    Is this possible using persistent connections or connections where the username/password for accessing the share (like the ones used during WinPE phase) aren't available or are hidden to users?

    Any idea would be very appreciated.

    Thanks.

     



  • 2.  RE: How can I robocopy from server to client without explicit credentials?
    Best Answer

    Posted Jun 23, 2016 02:12 PM
    Does the Altiris Services Service Account have admin access to the computers? You could use the "Run locally on the Deployment Server" option in the "Run Script" Task to robocopy to \\%COMPUTERNAME%\c$\dest (Caps are needed for a Deployment Server variable). Or just set aside a folder and hidden $ share with everyone access, not ideal but it will accomplish what you want.


  • 3.  RE: How can I robocopy from server to client without explicit credentials?

    Posted Jun 27, 2016 04:38 AM

    Unfortunately not. The DS server (or the new GSS server I'm installing right now) are standalone servers, not joined to the domain where the computers are.

    I'll try to use mapping the EXPRESS share using my "winpeuser" (is an user with only read access to this share and write access to temp folder).

    Because, what are the purpose of "Drive mappings" tab in Control Panel > Altiris Deployment Server options?

    Thanks.