Skip to main content

Hello,

I’m looking for a way to disable pre- and post-processes to avoid execution on a client.

To increase security / hardening.

Thanks

 

Hi Sergej,

 

The pre and post process can be disabled by prepending -- to the command.

Example prescan command is C:\command\pre.bat
Prepend the command with -- as below, the phase will be skipped.
--C:\command\pre.bat

 

Thanks,
Anant


Thank you @Anant , what I mean is to pretend an execution on the client completely. Even the script is in the configuration of Commcell Console, it should not run on the client.

Such kind of feature would increase security of critical nodes, e.g. an admin would not be able to execute a script/file he has restored on the client before.


 

Hey @Sergej, the only way I know is the revoke the right of the user to configure pre/post script. That capability is contained within in the agent permissions.

More details here: https://documentation.commvault.com/11.24/expert/8298_client_permissions.html

  • Configure a pre-process or post-process.

  • Add a pre-process and post-process for data recovery operations.

  • Remove a pre-process and post-process for data protection/archive operations.


Reply