Escalation Remote Command Question

[YvesM]

Hi I found in the documentation that with the remote command you can send a command to an windows agent.
I have know a little question about it.
I have entered the following. "samclient is a windows service"
{HOSTNAME}:C:\net stop samclient
Will this command be executed and where can I see if it was executed or not?
Will the information be shown under Administration Audit Audit Actions


Thx in advance.

[Alexei]

The information will be displayed in details of a specific event. The audit does not show executed commands yet.

[YvesM]

Hi, the run command will function when I put a batch file on the host which will execute the command. What is wrong with my command
{HOSTNAME}:C:\ net start spool


Thx

[Wolfgang]

My guess is:
The zabbix_agentd runs in the context of nt-authority initially without a shell. However "c:\net start ..." would require a shell to execute the "net" command.

So if you specify a .cmd or .bat file instéad, you force the execution of cmd.exe first which provides a shell. Then the content of the batch file is executed.

Regards

Wolfgang