GlobalProtect 邮政-VPN由于错误 193,连接脚本失败

GlobalProtect 邮政-VPN由于错误 193,连接脚本失败

9746
Created On 12/22/21 18:29 PM - Last Modified 05/29/25 19:59 PM


Symptom


  • PanGPS 日志文件中存在以下错误:
Error( 277): 11/29/21 09:43:29:632 WTSQueryUserToken failed. Error: 5
Error( 318): 11/29/21 09:43:29:632 RunProcessIntoDifferentSession: failed to SetTokenInformation. Error: 1314
Error( 383): 11/29/21 09:43:30:600 CreateProcessAsUser failed with value Error: 193
Error(3455): 11/29/21 09:43:30:600 Failed to open process 0. Error 87
Error(3507): 11/29/21 09:43:30:600 Failed to launch command. Error 1008.

 


Environment


  • GlobalProtectApp配置了 post-vpn-connect 脚本
  • Visual Basics 作为脚本方法
  • Windows 端点


Cause


  • GlobalProtect没有在端点上本地执行脚本的直接访问权限


Resolution


  1. 每当您使用 Visual Basics 作为脚本编写方法时GlobalProtectpost-vpn-connect,您必须指定“cscript.exe”或者“wscript.exe”脚本名称前的参数,否则GlobalProtect将无权访问该文件
例子:C :\Users\<用户>\Scripts\Logon\cscript.exe <脚本名称>.vbs或者C:\Users\<用户>\Scripts\Logon\wscript.exe <脚本名称>.vbs


Additional Information




Actions
  • Print
  • Copy Link

    https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA14u0000004MdOCAU&lang=zh_CN&refURL=http%3A%2F%2Fknowledgebase.paloaltonetworks.com%2FKCSArticleDetail

Choose Language