Install the package using an Administrator account, not a System account

Questions about WAPT Packaging / Requests and help regarding Wapt packages.
Forum Rules
Community Forum Rules
* English support on www.reddit.com/r/wapt
* French community support is available on this forum
* Please prefix the topic title with [RESOLVED] if it is resolved.
* Please do not edit a topic that is tagged [RESOLVED]. Open a new topic referencing the old one.
* Specify the installed WAPT version, full version, and build number (2.2.1.11957 / 2.2.2.12337 / etc.) as well as the Enterprise/Discovery edition.
* Versions 1.8.2 and earlier are no longer supported. The only questions accepted regarding version 1.8.2 are related to upgrading to a supported version (2.1, 2.2, etc.).
* Specify the server OS (Linux/Windows) and version (Debian Buster/Bullseye - CentOS 7 - Windows Server 2012/2016/2019).
* Specify the OS of the administration/package creation machine and the machine with the problematic agent, if applicable (Windows 7/10/11/Debian 11/etc.).
* Avoid asking multiple questions when opening a topic, otherwise it may be ignored. If there are multiple topics, open separate topics, preferably one after the other and not all at the same time (i.e., do not spam the forum).
* Include code snippets, screenshots, and other images directly in the post. Links to Pastebin, Bitly, and other third-party sites will be systematically removed.
* As with any community forum, support is provided voluntarily by members. If you require commercial support, you can contact Tranquil IT's sales department at 02.40.97.57.55
Locked
MichelF
Messages: 3
Registration: May 4, 2016 - 5:57 p.m.

May 4, 2016 - 6:09 PM

Hello,

After installing the Cygwin package with WAPT, I'm stuck on the following issue:

The first Cygwin package was installed from the console, and the successful installation occurred under the 'system' user.

My second configuration package contains the command: ssh-host-config and doesn't install correctly if I deploy it from the console. However, it installs normally if I launch the WAPT package installation from the PC via the command line, because the installation then occurs under the user account that is logged in.

Is there a way to force the deployment of a package from the console, with a user from the 'administrator' group present locally on the PC?

Regards,
Michel
User avatar
sfonteneau
WAPT Expert
Messages: 2318
Registered: July 10, 2014 - 11:52 PM
Contact :

May 4, 2016 - 11:12 PM

You can try running the command (ssh-host-config) in the wapt session setup...

However, if your command requires an administrator account, then it won't work.

Another thing I haven't tried is modifying the waptservice properties ((services.msc)) to require it to start with the administrator account (see attached file).

In theory, I suppose that should work.
Attachments
service.png
service.png (39.05 KB) Viewed 6491 times
so37
Messages: 23
Registration: Apr 10, 2016 - 1:43 p.m.

May 8, 2016 - 2:54 PM

Yes, changing the account for the WAPTService to an administrator account solved everything and resolved many of my problems. Is there a way to deploy this service, which is integrated into the agentsetup.exe file, using an administrator account by default?
User avatar
sfonteneau
WAPT Expert
Messages: 2318
Registered: July 10, 2014 - 11:52 PM
Contact :

May 9, 2016 - 8:10 PM

A possible answer can be found here:

https://blogs.msdn.microsoft.com/amanta ... edentials/

Please keep us updated on your findings!
MichelF
Messages: 3
Registration: May 4, 2016 - 5:57 p.m.

May 10, 2016 - 08:37

Hello,

I'm the original poster.

I can confirm that by changing the execution account for the WAPT service from "System" to "Administrator," the "ssh-host-config" script that follows the Cygwin installation works perfectly.

I didn't change any other settings during execution. The problem was indeed due to the System account.

My question is: Why is the default user account for the service set to "System"?

I haven't noticed any side effects after making the changes.

Thank you for any replies.

Regards,
Michel
User avatar
sfonteneau
WAPT Expert
Messages: 2318
Registered: July 10, 2014 - 11:52 PM
Contact :

May 10, 2016 - 11:39

I'm not a Wapt developer, but from my point of view, it seems complicated.

Not everyone has an administrator account enabled, and sometimes the admin account name changes.

Silent deployment also seems complicated.
It would involve putting the local administrator password in waptagent.exe.

And since waptagent is public, it would be enough to retrieve it to get the local administrator password. (I think)
It's a major security issue.

So far, I've always managed to work around the problems of software that doesn't support the system account.

One method for you would be to install Wapt on a Windows image (template), change the service account to Wapt, and then redeploy (with Fog, for example).

If a developer happens to see this, they might have a more appropriate answer.

Simon
MichelF
Messages: 3
Registration: May 4, 2016 - 5:57 p.m.

May 18, 2016 - 09:56

Hello,

After further consideration, I agree with those who suggested I continue using the System account.

The Administrator account does indeed require a password, and its name can vary from one PC to another.

Thank you for all these very constructive comments.

Regards,
Michel
Locked