Link to XLnow Homepage
Home
Login Register Member List
XLnow OnScript Forums   » OnScript Editor   » General Discussion   » Remote script operation creden...  

Welcome Guest ( Login or Register )

Remote script operation credentials
Author
Message
Posted 29.12.2004 09:30
Forum Newbie
Forum Newbie

Group: Forum Members
Active: 08.02.2005
Posts: 3
Is there a method I can use to change the credentials used for remote script operation without being a member of the same domain or computer ?
 
Thanks,
Scott
IP Logged
This member is offline.
Posted 04.01.2005 22:41


Forum Administrator
Forum Administrator

Group: Forum Moderators
Active: 13.04.2009
Posts: 78

Are you asking about remote WMI scripts or remote script execution using OnScript Network Edition?

Cyril Baratoff
XLnow - the makers of OnScript

IP Logged
This member is offline.
Posted 04.01.2005 23:14
Forum Newbie
Forum Newbie

Group: Forum Members
Active: 08.02.2005
Posts: 3

OnScript network edition.

IP Logged
This member is offline.
Posted 04.01.2005 23:27


Forum Administrator
Forum Administrator

Group: Forum Moderators
Active: 13.04.2009
Posts: 78

When OnScript runs scripts locally, the default is to run them as the interactive user.

With OnScript Network Edition you can run scripts remotely on other machines. Using DCOMCNFG you can specify which identity the OnScript Application (the component that runs the scripts) will run under and can restrict remote access. The accounts you specify must be known to the remote machine.

We have a description of how to set this up for both domain and workgroup scenarios and I will post it shortly.

Cyril Baratoff
XLnow - the makers of OnScript

IP Logged
This member is offline.
Posted 05.01.2005 08:17
Forum Newbie
Forum Newbie

Group: Forum Members
Active: 08.02.2005
Posts: 3
I will look forward to this article. Thanks.
IP Logged
This member is offline.
Posted 03.02.2005 22:36


Forum Administrator
Forum Administrator

Group: Forum Moderators
Active: 13.04.2009
Posts: 78

While work on complete and illustrated instructions on how to configure OnScript Network Edition to access remote machines is still underway, here is a short description on what is required and how to get it working.

As OnScript runs there are actually three processes involved:
OSEditor.exe  -  the OnScript Editor, which is the UI and always runs as the interactive user.
OSApp.exe (OnScript Application) and OSAppMgr.exe (OnScript Application Manager), collectively know as the OnScript Application Server. These two DCOM servers implement remotable actions such as script execution and file system access.

When working with scripts on the local machine these three processes will normally all be configured to run as the interactive user – this is the default configuration for DCOM servers and works just fine.

But when OnScript Network Edition is used to access a remote machine it connects to the OnScript Application Server DCOM servers of that remote machine. This will fail unless permissions and the identity of remote processes are configured correctly.

The simplest way to explain the required configuration is by using a group account whose members will have control of the OnScript Application Server and a user account that the two processes will run under (similar to a service account). For illustration purpuses let’s call them OnScriptApplicationUsers and OnScriptApplicationIdentity, respectively.


Here are the critical steps to get remote access working:

  • Make sure both accounts are valid on the remote machine (the can be local or domain accounts, choose what is appropriate).
  • Add any users or groups that should have access to the OnScript Application Server as members of OnScriptApplicationUsers.
  • Make OnScriptApplicationIdentity a member of OnScriptApplicationUsers. This is essential because otherwise the processes will not be able to interact and some operations will fail.
  • Give OnScriptApplicationIdentity any permissions your scripts require to run correctly. This is the account they will run under.
  • Run DCOMCNFG and locate the two DCOM servers OnScript.AppManager and OnScript.Application. For each of them do the following:
    • On the Security tab select “Customize” (on XP or 2003) or “Use custom launch permissions” (on 2000 and NT) and click Edit. Add the OnScriptApplicationUsers group and make sure it is set to “Allow launch”.
    • In the Identity tab change the option from “Interactive user” to “This user” and specify the OnScriptApplicationIdentity account and password.

Now run OnScript Editor and choose File / Add computer … and specify the remote machine by NETBIOS name, DNS name or IP address and ... experiment.

If you run into problems then Event Viewer is your first aid (both machines).

Cyril Baratoff
XLnow - the makers of OnScript

IP Logged
This member is offline.
Posted 04.02.2005 21:43


Forum Administrator
Forum Administrator

Group: Forum Moderators
Active: 13.04.2009
Posts: 78

For Windows XP machines running a remote OnScript Application Server configured as described above, there will be some more settings you might have to change.

In a workgroup scenario with paired user accounts on the two (or more) machines you will have to allow these accounts to authenticate as themselves and not as Guest (which is the default on XP).

Look for this entry in the Local Security Policy:

Security Settings
    Local Policies
        Security Options     Network Access: Sharing and security model for local accounts

The default is “Guest only – local users authenticate as Guest”.
Make sure you change it to: “Classic – local users authenticate as themselves”.


Windows XP with Service Pack 2 add some barriers of its own. We will publish a seperate description on how to let OnScript pass them.

Cyril Baratoff
XLnow - the makers of OnScript

IP Logged
This member is offline.
Posted 17.07.2008 15:29
Forum Newbie
Forum Newbie

Group: Forum Members
Active: 28.04.2009
Posts: 4

With regards to the instrtuctions Posted on 03.02.2005 21:36

I am unable to locate the two DCOM objects mentioned in the instructions, I have W2k3 server running terminal services that i have installed the server components on, is there anything else that i have to do??

 

Mikie

IP Logged
This member is offline.
Posted 17.07.2008 15:49


Forum Administrator
Forum Administrator

Group: Forum Moderators
Active: 13.04.2009
Posts: 78

We have to check if there is anything specific with Windows Server 2003 and Terminal Services. I will report back once we know more.

Cyril Baratoff
XLnow - the makers of OnScript

IP Logged
This member is offline.
Showing page 1 of 1 - 9 messages found
« Next Oldest :: Next Newest »

Powered by InstantForum.NET v3.4
Copyright © 2002, 2004, InstantASP Ltd. All rights reserved.