(imported topic written by SystemAdmin)
Hey guys…
I was working on a fixlet to update the McAfee ePO 4’s rogue sensor service. I have to try to update the sensor EXE quickly, or the McAfee framework will try to restart the service back up. Ok, so I decided to set the service to disabled, which hopefully will give me enough time.
Is it just me, or doesn’t changeservicestartmode.exe work? I’ve tried a few simplier custom actions to try to change any service (like the Themes service) to manual, and it doesn’t do anything under Vista or XP.
For instance…
wait “{pathname of client folder of site “BESSupport” & “\changeservicestartmode.exe”}” “Themes” manual
In the BES log it shows…
Command succeeded wait “C:\Program Files\BigFix Enterprise\BES Client__BESData\BES Support\changeservicestartmode.exe” “Themes” manual (fixlet 16789257)
I even tried running the same command manually from a CMD prompt (running CMD as an administrator) and it’s not changing anything. Yes, changeservicestartmode.exe does exist. Version 1.1.0.0. Also tried without having Themes in double-quotes.
Any ideas? Maybe there’s a newer version of that EXE?
-Paul
Here’s my real fixlet’s action…
// Version 2.0.2.112
download http://bigfix.njt.gov:52311/Uploads/0d58e65fcd65fa68e8b521cc7c0f8acfab9850ef/RSSensorexe.tmp
continue if {(size of it = 596813 AND sha1 of it = “0d58e65fcd65fa68e8b521cc7c0f8acfab9850ef”) of file “RSSensorexe.tmp” of folder “__Download”}
extract RSSensorexe.tmp
parameter “rssensorpath” = “{(if exists substring between “%22” of it then substring between “%22” of it else it) of image path of service “RSSensor”}”
wait “{pathname of client folder of site “BESSupport” & “\changeservicestartmode.exe”}” “RSSensor” manual
waithidden cmd /C net stop RSSensor
wait “{pathname of client folder of site “BESSupport” & “\changeservicestartmode.exe”}” “RSSensor” disabled
delete “{parameter “rssensorpath”}”
move __Download\RSSensor.exe “{parameter “rssensorpath”}”
wait “{pathname of client folder of site “BESSupport” & “\changeservicestartmode.exe”}” “RSSensor” auto
waithidden cmd /C net start RSSensor