Hello,
I'm running into a problem right now with Windows, the qemu agent and impersonate.
I'm using the proxmox API to configure my windows VM which has the qemu agent installed.
When I join a domain and need to perform actions with a domain account, I can't execute a command with a domain account identity.
Or I am forced to set the service account of the qemu agent with this domain account, because the agent executes commands with the service account associated with it.
I've tried workarounds like running a powershell command with 'Start-Process -Credential' but nothing happens, the command only executes if I remove -Credential.
According to my research, this is probably due to the fact that a service account cannot impersonate.
Another solution for me was to start the WinRM service and run an Invoke-Command.
However, I'd like to get rid of this service.
Do you have any other tricks that would allow the qemu agent to usurp an account to launch commands?
On Vmware in the api I had -Username and -Password options.
So far, only the winrm option works, but you need to activate and configure the service.
I'm running into a problem right now with Windows, the qemu agent and impersonate.
I'm using the proxmox API to configure my windows VM which has the qemu agent installed.
When I join a domain and need to perform actions with a domain account, I can't execute a command with a domain account identity.
Or I am forced to set the service account of the qemu agent with this domain account, because the agent executes commands with the service account associated with it.
I've tried workarounds like running a powershell command with 'Start-Process -Credential' but nothing happens, the command only executes if I remove -Credential.
According to my research, this is probably due to the fact that a service account cannot impersonate.
Another solution for me was to start the WinRM service and run an Invoke-Command.
However, I'd like to get rid of this service.
Do you have any other tricks that would allow the qemu agent to usurp an account to launch commands?
On Vmware in the api I had -Username and -Password options.
So far, only the winrm option works, but you need to activate and configure the service.
Last edited:
