PowerShell: Using RunOnce to have script survive reboot

RunOnce is a default windows function that could be used to have scripts survive a reboot.

As an engineer that works for a MSP, I tend to come into many different situations and networks for different companies. During most of this work I’ve found that scripting is key to maintaining a healthy network and minimizing workloads for our first line support. We tend to use MSP-aimed tooling to make sure we are able to deploy these scripts to clients and servers and have a central location and storage for these scripts. That way everyone always works with the same version of a script and we only have to preform maintenance on a single location.

the only issue about some of these scripts is that they have to run as multi-tiered scripts. an example would be the installation of .NET followed by a back-end application that requires .NET to be installed prior to booting(e.g. Exact Globe software). To resolve this you could choose to use Powershell remoting and create a workflow, but this requires the machine to be accessible remotely, something that could prove difficult if a client only has a single server.

the solution is actually very straight forward, Split your script into 2 files(or even 10 if you require it) and use the RunOnce registry key at the end of your script to kickoff the next script.

Example Powershell:

Write-Host "Changing RunOnce script." -foregroundcolor "magenta"
$RunOnceKey = "HKLM:\Software\Microsoft\Windows\CurrentVersion\RunOnce"
set-itemproperty $RunOnceKey "NextRun" ('C:\Windows\System32\WindowsPowerShell\v1.0\Powershell.exe -executionPolicy Unrestricted -File ' + "C:\Tempscript\TempScript2.ps1")

Example VBScript:

set ObjectShell = WScript.CreateObject("WScript.Shell")
strRunOnce = "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce\TempScript"
ObjectShell.RegWrite strRunOnce, "cscript c:\tempscript\tempscript2.vbs", "REG_SZ"

I’ve seen several other engineers point out that RunOnce should be used carefully and I agree partly – On client machines it could cause unexpected behavior as users don’t necessarily have all the permissions required for installations, or a different user logs onto the system than the one that wanted to run the script.

Another solution is using DSC, Which is higher maintenance but sometimes more accurate.

On Servers where you mostly control who logs on and at what times, So I believe these RunOnce scripts to be one of the best to survive reboots, DCS’s are bit more of a hack to maintain – Next to Powershell remoting of course 😉

3 thoughts on “PowerShell: Using RunOnce to have script survive reboot

  1. Katirzan

    Something else you might want to watch out for is that sometimes the runonce key does not clear nicely so the script is run again. I always make sure the next script removes the runonce key.

    Reply
  2. Rob D

    I realize this is old, but RE: Spiceworks users and them claiming this work as their own – I personally don’t think you have enough proprietary code and style in your post here to really lay claim to stolen intellectual property.

    While I understand and appreciate what you are saying, your method is the basic procedure of creating a runonce key using PowerShell (or VBScript, for that matter). I can’t see how someone could come up with a simple alternative which would be different by any extenuating degree to what you have posted here.

    Do I think they should link to your page if they got it from here? Yes. But if they don’t, I would move on. This is basic stuff, and you aren’t the first to come up with it.

    There are numerous examples prior to this post which basically discusses this very method.

    Reply
    1. Kelvin Tegelaar Post author

      Hi Rob,

      I agree wholeheartily, but they did not just copy the code, they copied 3 of my entire blogs verbatim and posted it under the names of one of their own editors. It has since been removed, So I’ve also removed the comment from this blog.

      Thanks for reading!

      Reply

Leave a Reply

Your email address will not be published. Required fields are marked *

This site uses Akismet to reduce spam. Learn how your comment data is processed.