Powershell – Can’t run powershell start-process with alternate credentials

credentialspowershellscripting

tI am trying to run a powershell script from another powershell script using alternate credentials.

If I run:

$cred = get-credentials
$localArgs = "/c Powershell c:\myscript.ps1"

Start-Process cmd.exe -ArgumentList $localArgs -Credential $cred -WindowStyle="Hidden"

the script errors with:

Start-Process : Parameter set cannot be resolved using the specified named parameters.

If I remove:

-Credential $cred

The script runs fine (but with the wrong credentials.)

Am I missing something in terms of how to use the -Credential agument?

Thanks,

Ben

Best Answer

If you are using the -Credential argument, you may need to also specify the -FilePath argument:

$cred = Get-Credential
start-process -FilePath C:\WINDOWS\system32\cmd.exe -Credential $cred

Related Solutions

Powershell – Specify Credentials to run Powershell Script to Query AD

As far as I know, there is no way to pass alternate credentials using the ADSI type accelerator. Two ways you could try to get around this in your code are:

have powershell.exe run as the domain user instead of your local user - this will cause everything in the script to use the domain credentials
use the Invoke-Command cmdlet, which allows you to pass in a script block to execute, and alternate credentials.

I've never tried either of these, so it will take some trial and error.

Another option that could be more flexible for you is to not use the ADSI type accelerator. There are 2 ways to accomplish this.

Use the .NET framework DirectoryService classes. Here is a good article that walks you through this process. It includes an example using alternate credentials.
Use the Quest Active Directory Management cmdlets. These are wrappers around a lot of AD stuff that make a lot of things easier. They also let you pass in alternate credentials.

Powershell – run AD commands from a standard PowerShell script

DSRM will work fine, too.

However, if you want to stay 100% PowerShell, you can use the ADSI provider to accomplish this natively within PowerShell without modules.

 $computer = "computername"
 $dom = [System.DirectoryServices.ActiveDirectory.Domain]::GetCurrentDomain()            
 $root = $dom.GetDirectoryEntry()            
 $search = [System.DirectoryServices.DirectorySearcher]$root            
 $search.filter = "(&(objectclass=computer)(name=$computer))"            
 $search.findall() | foreach-object{$_.GetDirectoryEntry() } | foreach-object{$_.DeleteObject(0)}

Best Answer

Related Solutions

Powershell – Specify Credentials to run Powershell Script to Query AD

Powershell – run AD commands from a standard PowerShell script

Related Topic