Access id denied error on Live Terminal session

[K.Gadirov]

During the live terminal session I did to an endpoint, I couldn't move/copy/rename text files with neither CMD nor Powershell. I always get the Access is denied error. What access rights does Cortex live terminal operates at? Is there any way to run it as admin?  

[nar · Accepted solution]

Hi @K.Gadirov 

Thanks for your query!

You should be able to manage files if you have the edit/modify access to live terminal, you can check with Admin who manages the role.

Please make sure the steps are followed per this article - https://docs-cortex.paloaltonetworks.com/r/Cortex-XDR/Cortex-XDR-Pro-Administrator-Guide/Initiate-a-...

Give it a like or mark as solution if this helped.

Best,
Naveen

[K.Gadirov]

Hi, thanks for the answer. The file I was trying to modify was Avast AV's config file so I could delete it later. I do have access to live terminal. I guess Avast was blocking Cortex from tampering with its config.