topic Access id denied error on Live Terminal session in Cortex XDR Discussions

Access id denied error on Live Terminal session

K.Gadirov — Wed, 27 Nov 2024 07:46:58 GMT

During the live terminal session I did to an endpoint, I couldn't move/copy/rename text files with neither CMD nor Powershell. I always get the Access is denied error. What access rights does Cortex live terminal operates at? Is there any way to run it as admin?

Re: Access id denied error on Live Terminal session

nar — Wed, 27 Nov 2024 08:19:31 GMT

Hi @K.Gadirov

Thanks for your query!

You should be able to manage files if you have the edit/modify access to live terminal, you can check with Admin who manages the role.

Please make sure the steps are followed per this article - https://docs-cortex.paloaltonetworks.com/r/Cortex-XDR/Cortex-XDR-Pro-Administrator-Guide/Initiate-a-Live-Terminal-Session

Give it a like or mark as solution if this helped.

Best,
Naveen

Re: Access id denied error on Live Terminal session

K.Gadirov — Wed, 27 Nov 2024 13:34:55 GMT

Hi, thanks for the answer. The file I was trying to modify was Avast AV's config file so I could delete it later. I do have access to live terminal. I guess Avast was blocking Cortex from tampering with its config.