Help deploy a powershell script to install speculation module

Hi folks, I need help checking the status "Speculation Execution Side-Channel Vulnerabilities". I use the document "https://support.microsoft.com/en-us/topic/understanding-get-speculationcontrol...

speculation module

Rudy_Ooms_MVP

MVP

Feb 16, 2022

Hi did you also run the script with the use of psexec -i -s powershell.exe to get in the system context? does that work?
And if you are deploying this powershell script with intune there must be something in the agentexector.log in the IME folder. Could you take a look at that log

elvys_marchon

Copper Contributor

Feb 18, 2022

Hi Rudy_Ooms_MVP

yep, when I use psexec local it works fine, but when in the Intune, same issue occur.
The issue only occurs through Intune, if I run the local script it runs fine.

Yes, in the agentexecutor.log I can see the script starting and after 30 min I see the timeout fail.

# Output agentexecutor.log

cmd line for running powershell is -NoProfile -executionPolicy bypass -file "C:\Program Files (x86)\Microsoft Intune Management Extension\Policies\Scripts\xscddefr-2f0d-4148-80be-8bf7cca6fbf2_bc108d02-ac34-41c3-a072-deswdefr.ps1"
[Executor] created powershell with process id 5567

# And output IntuneManagementExtension.log
[PowerShell] Fail, the details are {"Version":1,"SigningCode":649,"SigningMsg":"(Success) AccountId:swdefr-d2af-4011-af4b-e234556b4560,PolicyId:bc108d02-ac34-41c3-a072-e16ys6stgeh,Type:1,Enforce: Audit. OSVersion:10.0.19043,AgentVersion:1.51.204.0. ","ExecutionMsg":"Powershell execution has exceeded defined timeout."}

# and the Start-Transcript you can see above

😞

Forum Discussion

Help deploy a powershell script to install speculation module

Resources