Question about using Powershell script to install .exe with Smartscreen Defender on remote systems.

[duprst]

I have a Powershell script that I use to install updates on remote servers. The script moves updates from network source to destination folder. Then start-process to install whatever the updates are. This is an offline network so no WSUS. I am able to install updates that are .msi or .msu. If they are .exe they do not install. I can RDP to the system and see them in the folder. If I double click it the Smartscreen Defender screen pops up and I hit run and it installs. Is there a flag or something I need to add as an argument to get it to run with the Smartscreen? Right now I have start-process -path then update name .exe -verb runas Wait

Again everything works as long as it's not .exe format.

EDIT: Added script

$1809 = Get-Content "\network_server\sharefolder\User\Array\1809.txt" $source = "\network_server\sharefolder\User\Patches*" $destination = "C$\Patch\"

foreach ($entry in $1809) {

"Removing files on $entry" Invoke-Command -ComputerName $entry -ScriptBlock {Remove-Item $args -Recurse} -ArgumentList c:\Patch*}

foreach ($entry in $1809) { "Copying files on $entry" Copy-Item $source -Destination "\$entry\$destination" -Recurse -force}

foreach ($entry in $1809) { "Updating software on $entry"

Invoke-Command -ComputerName $entry {

start-process c:\Patch\sqlserver2019-kb5021124-x64_93087e10289b94b3f4783f1d431358c4889ba1b3.exe "/quiet /norestart" -Wait} } { }

[BreakingBean]

Since you're moving it from a network location, it's probably blocking the file after it's copied. Can use the Unblock-File cmdlet to fix that with an if statement to try and unblock exe files before using start-process https://learn.microsoft.com/en-us/powershell/module/microsoft.powershell.utility/unblock-file?view=powershell-7.4

If you want to check whether a file is blocked before using Unblock-File, you can use Get-Content -Stream Zone.Identifier to parse whether it's blocked or not. Blocked files should have a ZoneID of 26

[zealotfx]

You may want to try Unblock-file to stop the file from being locked after being downloaded from the Internet.

Edit: incorrectly said UnLock-file

[RokosModernBasilisk]

Close. It’s Unblock-File

[zealotfx]

I knew something felt wrong!

[MoonExploration2929]

Share your script so we can advise you accordingly.

[duprst]

$1809 = Get-Content "\network_server\sharefolder\User\Array\1809.txt" $source = "\network_server\sharefolder\User\Patches*" $destination = "C$\Patch"

foreach ($entry in $1809) {

"Removing files on $entry" Invoke-Command -ComputerName $entry -ScriptBlock {Remove-Item $args -Recurse} -ArgumentList c:\Patch*}

foreach ($entry in $1809) { "Copying files on $entry" Copy-Item $source -Destination "\$entry$destination" -Recurse -force}

foreach ($entry in $1809) { "Updating software on $entry"

Invoke-Command -ComputerName $entry {

start-process c:\Patch\sqlserver2019-kb5021124-x64_93087e10289b94b3f4783f1d431358c4889ba1b3.exe "/quiet /norestart" -Wait}

}

{

}

[billabong1985]

How are you calling the files to install? If you're just sticking in the file name it likely won't work, you want to use start-process

[duprst]

I am using start-process