Client Management Suite

 View Only
  • 1.  PGP bypass command in Altiris task/script

    Posted Mar 28, 2012 12:00 PM

    I am tring to run a simple script on a group of PCs that includes a reboot.  At the end of the script before the reboot command I put in a PGP bypass line so that encrypted PCs boot back to the Windows login screen.  The problem is it doesn't seem to take the command.  If I copy the script down to the PC as a batch file and run it everything works fine.  I'm not sure if this is related to running as the service account or something in the syntax?

     

    The line is:

     

    "C:\Program Files\PGP Corporation\PGP Desktop\pgpwde.exe" --add-bypass -d 0 -p somepassword

     

     

    Any suggestions or insight?



  • 2.  RE: PGP bypass command in Altiris task/script

    Posted Apr 09, 2012 10:07 PM

    Hi there,

    It would be helpful if you could upload the client log so we can see what is going on when the agent runs the command.



  • 3.  RE: PGP bypass command in Altiris task/script

    Posted Apr 10, 2012 11:41 AM

    This script is what I currently use for the exact purpose your talking about JAunmc.

    start "PGP BootGuard Bypass" /MIN /WAIT "C:\Program Files\Pgp Corporation\Pgp Desktop\Pgpwde.exe" --add-bypass --disk 0 --admin-passphrase yourpasswordhere

     

    I push this script to all of my laptops, then 5 mins later run a force reboot command. The laptops then come up to the windows log on screen so additional patching can run.

     

    One thing to note that I've found after lots of trial and error is that this PGP bypass can ONLY work if the user that has PGP rights to that machine is logged on when the script is run. I've tried it if the user is logged off or if someone other then the main user of the machine is logged on and the script will not work.

     

    I've never had a problem so long as the user of the laptop is logged on when the script runs. Has to do with PGP and who it grants admin access to. If someone else is logged on then the PGP desktop will not allow anyone admin access to it.

     

    Hope that helps.

     

    Larry