Session start script with Pulse Secure

[Mistouf]

Hello,

Actually, my compagny make VPN connections with Network Connect, but we will pass to use Pulse Secure. I've test all my roles but one case make me trouble.

My role launch a "Windows : Session start script" --> \\workstation\files\script.cmd. The script launch a rds. 

When I use Network Connect, it's work, the script is execute.

When I use Pulse Secure, it doesn't work, no script was execute. To the log, I have this error message :

Spoiler

00294,09 2019/10/18 08:50:18.995 1 Système PulseSecureService.exe iveConnectionMethod p0160 t834 ncSessionScriptsWIN.cpp:93 - 'ncAccessMethod' copy file from '\\xxxx.xxxx.net\xxxxx$\xxxxx_RDS_xxxx.cmd' to 'C:\Users\xxxxx\AppData\Local\Temp\cpuD0CD.cmd' failed with error 53, attempt 0

I try to launch manually the script with the Explorer Windows, it's work with NC but not with Pulse.

Do you have an idea?

Thanks a lot.

[Mistouf]

I think the starts before the network is completely available.

Nobody has a solution?

[[email protected]]

Error 53: Access is Denied 😐

Pulse Client will try to copy the file from the share drive using the machine account not using the user account. Is there way to check the logs on the share driver to see why the access has been denied?

Thanks,

Ray.

[Mistouf]

I do not have access log to the acces on files.

But, I have install "Process Monitor" and I have this event :

"Opration : CreatFile / Result : BAD NETWORK PATH"

But when I copy the link manually on the file explorer I have access to the share.

The rights on the share are :

Administrotar : Full control

Users : Reading / Reading and Excution / Display of the contents of the folder

When I make : ipconfig \displaydns : the DC is known.

Sometimes it's work, sometimes it's doesn't work.

[Mistouf]

No body have a soluce ?

[Servitia]

Hello,

Can you please explain why Pulse copy the file .cmd ?

I m currently trying to use "Session start script" with "C:\Program Files\Pulse Secure\test.cmd" and I saw that everytime Pulse copy the file to "C:\users\Username\Appdata\local\temp\1\xxx.cmd"

Pulse copy the file "test.cmd", to another location and also change the name of the .cmd

As our company use SRP(Software Restriction Policy) we need to whitelist files or path to authoryze executable.

Do you know if we can "configure" the copy ?

For example : fix the .cmd name ? choose the path to copy ? or disable the copy and use the original path ?

Many thanks

[zanyterp]

it copies it to a place it can run/execute from
no, the copy cannot be configured; it will always copy from the location identified to that temporary location. does your SRP allow you to whitelist source files? does it allow wild cards for directories (e.g. c:\users\username
appdata\local\temp\*)?

[Mistouf]

My problem is still topical.

When I use NC, my script launches at startup, but if I use Pulse, the script does not launch.

Locally, everything works. No one has any ideas?

[[email protected]]

Can you please check if the user role has the "Pulse Secure Client" option enabled? Without checking that option, session script would be launched in NC but not in Pulse Client.

[Mistouf]

Where is this option? I think there is in " Genreal - Overview", but i don't see.

I have :

- VLAN / Source IP

- Session Options

- UI Options

- Cloud Application Visibility

I use 9.1R4.1

Thanks