Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

Background / Goal

I have a VMWare template that I am deploying and I am using VMWare's "customization specifications" to perform many of the sysprep tasks.

The last thing I need to accomplish is the silent install of several applications in sequence. I have a PowerShell script that does this, but it only works when elevated.

VMWare has a "Run Once" feature as part of its customization specifications. Ideally, I'd like to use this to call the PowerShell script in an elevated manner so it will run when I logon for the first time as an Administrator.

What I've Tried / Problems

  • I tried calling PsExec -s from the Run Once command, and had PsExec call the powershell. Unfortunately, PsExec needs to run in an elevated command line, so this doesn't work out.


It occurrs to me that this might not be possible. Am I thinking about it wrong? Should I instead be authoring a remote PS1 and running it against the macine that's created? This is doable but i wanted to try to automate things as much as possible and remove any confusion for people besides me who may want to deploy.

share|improve this question
been awhile since I've tried this but you should not need psexec in the runonce just "powershell c:\temp\script.ps1" etc. The issue would be that you need the installables local to the device. – tony roth Oct 19 '12 at 15:38
What @Tony said. If VMware's own customization process is run with elevated privileges then all its child process should do so too. – Patrick Oct 24 '12 at 11:37
up vote 1 down vote accepted

Taken from

function elevate-process
$file, [string]$arguments = $args;
$psi = new-object System.Diagnostics.ProcessStartInfo $file;
$psi.Arguments = $arguments;
$psi.Verb = "runas";

elevate-process [full path to your process here]

What @Tony Roth said. If VMware's own customization process is run with elevated privileges then all its child process should do so too, so launching a Powershell script there should run with the associated processes.

If not then I don't know a way of elevating without interaction. Thats kind of the point of the elevation system. The code above will elevate a process from a non admin to an admin userspace, however you will have to click past UAC, I use this in my builds.

Startup contains the Elevate-Process script that simply calls the main script. As the machine starts after first boot it kicks this off, you click on OK on the UAC and it completed the rest with admin privileges.

As an alternative perhaps disable UAC in your initial build and then include code to re-enable it at the end of the build?

This looks like it will help with that but note I haven't used it.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.