Take the 2-minute tour ×
Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

The following situation:

We have Windows XP Embedded clients that have all admin shares disabled and only have read-only shares (for security reasons).

What we want to do is run remote shell (dos) commands on these machines. At first we looked at PsExec & BeyondExec applications (and all sorts of variants), but all of them rely on having at least an admin$ share, which are disabled on our systems.

Telnet is not secure enough, as is RSHD servers.

So we looked at the next obvious solution: and SSH server.

We also prefer an open-source or freeware solution that is still maintained. I looked at freeSSH server for Windows, but that didn't run stable, I tried installing copSSH, WinSSH & openSSH for Windows, but none of these applications seem to work on Windows XP Embedded. The services can either not be installed or cannot be started. I don't know why. Some kind of dependency that is missing.

So are there any other solutions out there? I don't care about having to an agent installation locally of some kind on each system, as long as the size of the software is small enough.

Can someone suggest some alternatives to what I've already mentioned? Thank you very much.

share|improve this question
    
You may want to repost to serverfault since they deal with administration and SuperUser is more about personal computing. –  JNK Aug 3 '10 at 19:48

1 Answer 1

ok never mind, I just found out how to run batches against netcat.

cryptcat.exe -k test1234 xxx.xxx.xxx.xxx 5555 < E:\commands.txt > E:\results.txt

and inside commands.txt for example a connection to a central script server + installation script on script server + disconnection off central script server

for example:

@echo off

net use \\scriptserver\scripts password /user:username
\\scriptserver\scripts\install_ccleaner.cmd
net use \\scriptserver\scripts /delete

exit

and bang... ccleaner is installed on the target machine. I'm impressed!

Now I just need to write a wrapper around ncat to have some encrypted handling/storing of the password & port number (and error handling) and a lot of beta testing, and thanks to you, I finally found a perect simple solution to do what we want.

Thanks a lot for all the help.

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.