powershell.exe as registered executables

[marko125]

Hello,

I have run out of ideas, may be somebody can help or give any hint. Powersehell.exe is registered executable. I created server task to run external command and using registered powershell and parameters are "-file script.ps1". Then I manually execute that server task, then script is executed twice - second time it is executed with some delay - based on log file, script is creating. Sometime second execution starts quite soon, sometime first run finishes and then second run executes immediately. If I take script and execute that directly from powershell.exe, then it run's only once and produces correct log file.  Script in general executes SQL query, AD queries, sends email and writes status messages to log file. executed as server task, it does everything that, but twice - instead of 2 email messages, it produces 4 and so on. ePO is 5.9.1 

Thanks in advance.

[cdinet]

I apologize for the delay in answering.  Did you ever get this resolved?  If not, please open a ticket with McAfee so we can look at logs to figure out why it is doing this.

[BWalter · Accepted solution]

Had the same issue (ePO 5.9).  Looks to be resolved in ePO 5.10.

On a related note, if someone also comes across it, for powershell as registered executable running as a domain user (but local admin on ePO server) was getting error:

Command failed [Command: Powershell <powershell script.ps1>] [Return Code: 1058] [Output: Error creating process! The service cannot be started, either because it is disabled or because it has no enabled devices associated with it. ]

Resolution was to start "Secondary Logon" service (and set it to auto start). (Admin group already had 'Log on as a batch job' user right, which is also required)

[cdinet]

Thanks for sharing that info!