Automating SFC as FIM solution
I would love to use Windows' native WFP as a FIM (File Integrity Monitoring) solution to help with PCI compliance. I was able to script sfc in powershell for Server 2008 and have it log an event and send an email if a mismatch is detected. I attempted to do something similar for Server 2003 but I have found that I cannot run sfc unless an administrator is logged in. Is is possible to run sfc without having an administratorlogged in on 2003? I have tried running as a scheduled task, disabling the WFP progress bar, and running via psexec but they all fail without an admin logged in.Jeff Graves, ORCS Web, Inc.
December 12th, 2009 2:04am

did you try to use PSEXEC with the -I switch to start it interactivelly?ondrej.
Free Windows Admin Tool Kit Click here and download it now
December 14th, 2009 3:32pm

Yes,I did test that:psexec \\computer -i 0 sfc /scannowAnd it fails with error code 1. I had to use the console session as SFC won't run in anything but.Jeff Graves, ORCS Web, Inc.
December 14th, 2009 6:01pm

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics