search

OCSInventory-NG / WindowsAgent

OCS Inventory NG Agent for Windows
http://www.ocsinventory-ng.org/
Other
154 stars 80 forks source link

Install at startup - shutting down #114

Open sokatra opened 5 years ago

sokatra commented 5 years ago

General information

Operating system :
Windows 7 - X64

OCS Inventory information

Windows agent version : 2.4.0

Problem's description

Feature Request Ocs-Inventory really needs a method to install big applications at startup or during shutdown. I ceated a method in conjuction with ocs-inventory to install a application during shutdown with special registry keys. The registry keys representing the same keys which are beeing created if you use a group policy shutdown script. see here a startup script https://kb.stonegroup.co.uk/index.php?View=entry&EntryID=320 here are the necessary shutdown entries in the windows registry https://michlstechblog.info/blog/windows-execute-a-script-at-shutdown/

Install programms at startup or shutdown is sometimes really needed, because you don't have to close user programms. The WPGK community has a more sophisticated variant to install packages at startup by using a special Group Policiy extension. They have this type of installation for years. It is important that there is a message created which displays the installation progress https://wpkg.org/WPKG-GP https://github.com/cleitet/wpkg-gp/wiki/Behind-the-Scenes It should really help the ocs-invenotry project if this type of installation is possible. even the open source software OPSI is able to do an installation on shutting down. https://uib.de/eng/opsi-cofunding/cofunding/ Installation on Shutdown: Installation starts when the client shuts down.

It would be nice if one is able to create a package for ocs-inventory an dynamically decide to apply this package normally or at shutdown /startup during deployment.

Kind regards Sokatra

Inventory log file ( optional )

sokatra commented 5 years ago

the shutdwon queu should contain all packages which has to be installed at shutdown, but if the ocs-inventory admin decides to remove one package from the client - the package should also be deleted from the queu. So for excample i could add 5 packages to be installed on shutdown - but before the user shutdown the computer an admin decides to pull pack 2 packages from installation this should be possible

sokatra commented 5 years ago

a progress or bussy indicator would also be nice- but this can be implemented via command line tools. The main thing is to use the group Policy to start a script by shutdown and hide this script via VB. But some command in the script shows a progress. I've already done it all via scripting with the help of a gpo - a script and vb script to hide the cmd https://superuser.com/questions/62525/run-a-batch-file-in-a-completely-hidden-way The batch itself start some program to show a busy (progress indicator) It would be nice if the ocs team creates a bussy indicatior exe which can be started from command line with some option (show text, ask user to cancel, ask yes no and so forth) It would also be nice if the user can only deny the shutdown install for example only 5 times or forever

sokatra commented 5 years ago

Opsi (it is a fantastic open source package client management) also uses a credential provider to block login. Blocking the login has some advantages . you can have a Computer which wasn't online for a long time - by blocking the login you can install everything which is needed to make the computer secure before a user is able to login Here some explanation from another company https://translate.google.com/translate?hl=de&sl=auto&tl=en&u=https%3A%2F%2Fwww.nwc-services.de%2Fen%2Fsupport-en%2Fblog%2Fentry%2Fsperren-der-lokalen-anmeldung

But i also want to mention that some experts don't think that startup or shutdown installations are necessary see link is dead -> blogs.technet.microsoft.com/askpfeplat/2015/04/26/the-startup-script-is-dead/ https://techcommunity.microsoft.com/t5/core-infrastructure-and-security/the-startup-script-is-dead/ba-p/257831

sokatra commented 4 years ago

i found a nice script to automate the group policy creation with a single command. It is a visual basic script which creates the necesseary gpo settings. It so fantastic to have such a script

https://www.c-amie.co.uk/technical/automatically-scripting-windows-startup-scripts-and-shutdown-scripts-using-the-command-line/ example cscript.exe AddLocalGpStartupScript.vbs shutdown "D:\Scripts\MyScript.cmd"

sokatra commented 3 years ago

this command line tool to create group policys can also be helpfull to create the "shutdown install policy" LGPO.exe https://docs.microsoft.com/de-de/archive/blogs/secguide/lgpo-exe-local-group-policy-object-utility-v1-0