cancel
Showing results for 
Search instead for 
Did you mean: 

Session start script with Pulse Secure

Highlighted
Occasional Contributor

Session start script with Pulse Secure

Hello,

 

Actually, my compagny make VPN connections with Network Connect, but we will pass to use Pulse Secure. I've test all my roles but one case make me trouble.

My role launch a "Windows : Session start script" --> \\workstation\files\script.cmd. The script launch a rds. 

When I use Network Connect, it's work, the script is execute.

When I use Pulse Secure, it doesn't work, no script was execute. To the log, I have this error message :

Spoiler
00294,09 2019/10/18 08:50:18.995 1 Système PulseSecureService.exe iveConnectionMethod p0160 t834 ncSessionScriptsWIN.cpp:93 - 'ncAccessMethod' copy file from '\\xxxx.xxxx.net\xxxxx$\xxxxx_RDS_xxxx.cmd' to 'C:\Users\xxxxx\AppData\Local\Temp\cpuD0CD.cmd' failed with error 53, attempt 0

I try to launch manually the script with the Explorer Windows, it's work with NC but not with Pulse.

 

Do you have an idea?

 

Thanks a lot.

17 REPLIES 17
Highlighted
Occasional Contributor

Re: Session start script with Pulse Secure

I think the starts before the network is completely available.

 

Nobody has a solution?

Highlighted
Moderator

Re: Session start script with Pulse Secure

Error 53: Access is Denied 😐

 

Pulse Client will try to copy the file from the share drive using the machine account not using the user account. Is there way to check the logs on the share driver to see why the access has been denied?

 

Thanks,

Ray.

PCS Expert
Pulse Connect Secure Certified Expert
Highlighted
Occasional Contributor

Re: Session start script with Pulse Secure

I do not have access log to the acces on files.

 

But, I have install "Process Monitor" and I have this event :

"Opration : CreatFile / Result : BAD NETWORK PATH"

But when I copy the link manually on the file explorer I have access to the share.

The rights on the share are :

Administrotar : Full control

Users : Reading / Reading and Excution / Display of the contents of the folder

 

When I make : ipconfig \displaydns : the DC is known.

 

Sometimes it's work, sometimes it's doesn't work.

 

Occasional Contributor

Re: Session start script with Pulse Secure

No body have a soluce ?

Highlighted
New Contributor

Re: Session start script with Pulse Secure

Hello,

 

Can you please explain why Pulse copy the file .cmd ?

I m currently trying to use "Session start script" with "C:\Program Files\Pulse Secure\test.cmd" and I saw that everytime Pulse copy the file to "C:\users\Username\Appdata\local\temp\1\xxx.cmd"

 

Pulse copy the file "test.cmd", to another location and also change the name of the .cmd

 

As our company use SRP(Software Restriction Policy) we need to whitelist files or path to authoryze executable.

 

Do you know if we can "configure" the copy ?

For example : fix the .cmd name ? choose the path to copy ? or disable the copy and use the original path ?

 

Many thanks

 

Highlighted
Moderator

Re: Session start script with Pulse Secure

it copies it to a place it can run/execute from
no, the copy cannot be configured; it will always copy from the location identified to that temporary location. does your SRP allow you to whitelist source files? does it allow wild cards for directories (e.g. c:\users\username
appdata\local\temp\*)?
Highlighted
Occasional Contributor

Re: Session start script with Pulse Secure

My problem is still topical.
When I use NC, my script launches at startup, but if I use Pulse, the script does not launch.
Locally, everything works. No one has any ideas?
Highlighted
Moderator

Re: Session start script with Pulse Secure

Can you please check if the user role has the "Pulse Secure Client" option enabled? Without checking that option, session script would be launched in NC but not in Pulse Client.

PCS Expert
Pulse Connect Secure Certified Expert
Highlighted
Occasional Contributor

Re: Session start script with Pulse Secure

Where is this option? I think there is in " Genreal - Overview", but i don't see.

I have :

- VLAN / Source IP

- Session Options

- UI Options

- Cloud Application Visibility

 

I use 9.1R4.1

 

Thanks