Absent Member.. JasonCantrell Absent Member..
Absent Member..
112 views

[OO Support Tip] How does the Remote Command Execution (RCE) operation work?

Question:

How does the Remote Command Execution (RCE) operation work?

 

Solution:

RCE works by calling WMI to process the command on the remote host.  An IPC connection is then made to the box with the value specified or by default to the Admin share.

 

This means that by default the command runs in the context of the WMI service which is LocalSystem.  LocalSystem cannot access remote resources.  In 9.0 a hidden input was added that allows delegation/impersonation.  To use it add a Input to the RCE operation called useDelegation.  This accepts boolean inputs true/false.  If set to true the operation will attempt to create a process under WMI as the user specified in the operation.  In 9.00.03 the behavior was changed and impersonation/delegation is always attempted.

 

Direct link to the document here:

http://support.openview.hp.com/selfsolve/document/KM1027532

HP Support
If you find that this or any post resolves your issue, please be sure to mark it as an accepted solution.
Labels (2)
0 Likes
The opinions expressed above are the personal opinions of the authors, not of Micro Focus. By using this site, you accept the Terms of Use and Rules of Participation. Certain versions of content ("Material") accessible here may contain branding from Hewlett-Packard Company (now HP Inc.) and Hewlett Packard Enterprise Company. As of September 1, 2017, the Material is now offered by Micro Focus, a separately owned and operated company. Any reference to the HP and Hewlett Packard Enterprise/HPE marks is historical in nature, and the HP and Hewlett Packard Enterprise/HPE marks are the property of their respective owners.