commvault.com commvault.com
Solved

Disable Pre- and Post-processes

  • 1 September 2021
  • 3 replies
  • 111 views
S
Rank
Badge +3

Hello,

I’m looking for a way to disable pre- and post-processes to avoid execution on a client.

To increase security / hardening.

Thanks

 

icon

Best answer by Damian Andre 1 September 2021, 23:26

View original

3 replies

A
Rank
Badge

Hi Sergej,

 

The pre and post process can be disabled by prepending -- to the command.

Example prescan command is C:\command\pre.bat
Prepend the command with -- as below, the phase will be skipped.
--C:\command\pre.bat

 

Thanks,
Anant

S
Rank
Badge +3

Thank you @Anant , what I mean is to pretend an execution on the client completely. Even the script is in the configuration of Commcell Console, it should not run on the client.

Such kind of feature would increase security of critical nodes, e.g. an admin would not be able to execute a script/file he has restored on the client before.

Damian Andre
Rank
Userlevel 7
Badge +23

 

Hey @Sergej, the only way I know is the revoke the right of the user to configure pre/post script. That capability is contained within in the agent permissions.

More details here: https://documentation.commvault.com/11.24/expert/8298_client_permissions.html

  • Configure a pre-process or post-process.

  • Add a pre-process and post-process for data recovery operations.

  • Remove a pre-process and post-process for data protection/archive operations.

Reply


Terms & ConditionsCookie settings