Permissions
in [Terminal Services]
|
From: stjoe5373 on 11 Jul 2008 08:17 Hi, I'm using TS on a 2003 Server and I've got a user logging on and what not. I've installed a program with the Admin account and I can install and run it just fine but when I try to run the program under the other user account I'm getting a permission error. I can't seem to find where I change the permissions for a TS user so I can run the program. Thanks Craig
From: Jeff Pitsch on 11 Jul 2008 10:03 Use Process Monitor http://technet.microsoft.com/en-us/sysinternals/bb896645.aspx to track down file and registry permissions that may be incorrect. Most likely it is simply this. Jeff Pitsch Microsoft MVP - Terminal Services <stjoe5373(a)news.postalias> wrote in message news:%231YQYA14IHA.2064(a)TK2MSFTNGP02.phx.gbl... > Hi, > I'm using TS on a 2003 Server and I've got a user logging on and what not. > I've installed a program with the > Admin account and I can install and run it just fine but when I try to run > the program under the other user account > I'm getting a permission error. I can't seem to find where I change the > permissions for a TS user so I can run the program. > Thanks Craig >
From: Vera Noest [MVP] on 12 Jul 2008 04:53 If the server wasn't in install mode during the installation (Craig, was it?), then the problem could be more complicated. _________________________________________________________ Vera Noest MCSE, CCEA, Microsoft MVP - Terminal Server TS troubleshooting: http://ts.veranoest.net ___ please respond in newsgroup, NOT by private email ___ "Jeff Pitsch" <jeff(a)jeffpitschconsulting.com> wrote on 11 jul 2008 in microsoft.public.windows.terminal_services: > Use Process Monitor > http://technet.microsoft.com/en-us/sysinternals/bb896645.aspx to > track down file and registry permissions that may be incorrect. > Most likely it is simply this. > > Jeff Pitsch > Microsoft MVP - Terminal Services > > > <stjoe5373(a)news.postalias> wrote in message > news:%231YQYA14IHA.2064(a)TK2MSFTNGP02.phx.gbl... >> Hi, >> I'm using TS on a 2003 Server and I've got a user logging on >> and what not. I've installed a program with the >> Admin account and I can install and run it just fine but when I >> try to run the program under the other user account >> I'm getting a permission error. I can't seem to find where I >> change the permissions for a TS user so I can run the program. >> Thanks Craig
From: v-morche on 14 Jul 2008 04:42 Hi, As far as I know, some legacy applications were not designed for terminal server so they are incompatible with terminal server. They may require special access to system resources, such as the registry and system directories, in order to work correctly. As a result, you may notice that only administrators can run the application properly. Based on my experience, many permission issues are caused by registry and file access settings. We can try our best to check whether we can run the application without Local Administrators rights; however, as we have little understanding on how the application is developed and which permissions it needs, we are not the best resource for this issue. To troubleshoot this problem efficiently, I suggest that you contact the support engineer or developer of the application to see whether this software is compatible with terminal server and what permissions it needs to run. They are best resource for this issue. I appreciate your understanding. Having said that, I am still glad to provide some suggestions for your reference. In Windows 2003 terminal server, there are two Permission Compatibility modes: Full Security and Relaxed Security. Considering the current situation, let us perform the following steps to set the Permission Compatibility mode to Relaxed Security to see whether those applications work: 1. Open the Terminal Services Configuration snap-in, high light the Server Settings item. 2. Double click the "Permission Compatibility" item, and set it to "Relaxed Security" option, and click OK. 3. Restart the terminal server to test this issue again. The above option just opens the security permissions to the core registry keys and folders which are enough for most legacy applications; however, some applications may still have some special permission requirement on some folders and registry keys. If this problem continues, you can use the Regmon and Filemon tools to track the registry and file access information to see whether you receive "Access Denied" error and take corresponding action. 1. perform the following steps to use the FileMon tool to monitor the file access when you double click an Word document: - Logon to the console of the terminal server as administrator. Click the link below to download the tool named Filemon. http://www.microsoft.com/technet/sysinternals/utilities/filemon.mspx - Extract all the files from the ZIP file. - Double click the Filemon.exe to run the tool. - Click Clear icon on the toolbar. - Try to reproduce the problem by launching the application as a normal user. - When the error message is popped up, please click the File menu and uncheck "Capture Events". - Click the menu File-> Save, save the log to a .log file. 2. Please perform the following steps to use the RegMon tool to monitor the file access when you open an Office application - Please download the Registry Monitor (regmon) tool from http://www.microsoft.com/technet/sysinternals/ProcessesAndThreads/Regmon.msp x - Extract it and double click the regmon.exe to execute it. - From the Options menu, select Filter/Highlight, click the Defaults button and click OK. - Click the Edit menu and click Clear Display. - Try to reproduce the problem by launching the application as a normal user. - When the error message is popped up, please click the File menu and uncheck "Capture Events". - Click the menu File-> Save, save the log to a .log file. I hope that the above information can be of assistance. Sincerely Morgan Che Microsoft Online Support Microsoft Global Technical Support Center Get Secure! - www.microsoft.com/security ===================================================== When responding to posts, please "Reply to Group" via your newsreader so that others may learn and benefit from your issue. ===================================================== This posting is provided "AS IS" with no warranties, and confers no rights. -------------------- --->From: <stjoe5373(a)news.postalias> --->Subject: Permissions --->Date: Fri, 11 Jul 2008 08:17:30 -0400 --->Lines: 10 --->X-Priority: 3 --->X-MSMail-Priority: Normal --->X-Newsreader: Microsoft Outlook Express 6.00.2900.3138 --->X-RFC2646: Format=Flowed; Original --->X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.3198 --->Message-ID: <#1YQYA14IHA.2064(a)TK2MSFTNGP02.phx.gbl> --->Newsgroups: microsoft.public.windows.terminal_services --->NNTP-Posting-Host: cblmdm72-240-127-118.buckeyecom.net 72.240.127.118 --->Path: TK2MSFTNGHUB02.phx.gbl!TK2MSFTNGP01.phx.gbl!TK2MSFTNGP02.phx.gbl --->Xref: TK2MSFTNGHUB02.phx.gbl microsoft.public.windows.terminal_services:19041 --->X-Tomcat-NG: microsoft.public.windows.terminal_services ---> --->Hi, --->I'm using TS on a 2003 Server and I've got a user logging on and what not. --->I've installed a program with the --->Admin account and I can install and run it just fine but when I try to run --->the program under the other user account --->I'm getting a permission error. I can't seem to find where I change the --->permissions for a TS user so I can run the program. --->Thanks Craig ---> ---> --->
From: stjoe5373 on 14 Jul 2008 08:07 Thanks All for the respones, Morgan when I try to change the compatibility mode I receive the message To change permission compatibility settings you must switch to application server mode in TS. How do I change to application mode? Thanks again, Craig "Morgan che(MSFT)" <v-morche(a)online.microsoft.com> wrote in message news:CABOM2Y5IHA.1620(a)TK2MSFTNGHUB02.phx.gbl... > Hi, > > As far as I know, some legacy applications were not designed for terminal > server so they are incompatible with terminal server. They may require > special access to system resources, such as the registry and system > directories, in order to work correctly. As a result, you may notice that > only administrators can run the application properly. Based on my > experience, many permission issues are caused by registry and file access > settings. We can try our best to check whether we can run the application > without Local Administrators rights; however, as we have little > understanding on how the application is developed and which permissions it > needs, we are not the best resource for this issue. To troubleshoot this > problem efficiently, I suggest that you contact the support engineer or > developer of the application to see whether this software is compatible > with terminal server and what permissions it needs to run. They are best > resource for this issue. I appreciate your understanding. > > Having said that, I am still glad to provide some suggestions for your > reference. In Windows 2003 terminal server, there are two Permission > Compatibility modes: Full Security and Relaxed Security. Considering the > current situation, let us perform the following steps to set the > Permission > Compatibility mode to Relaxed Security to see whether those applications > work: > > 1. Open the Terminal Services Configuration snap-in, high light the Server > Settings item. > 2. Double click the "Permission Compatibility" item, and set it to > "Relaxed > Security" option, and click OK. > 3. Restart the terminal server to test this issue again. > > The above option just opens the security permissions to the core registry > keys and folders which are enough for most legacy applications; however, > some applications may still have some special permission requirement on > some folders and registry keys. If this problem continues, you can use the > Regmon and Filemon tools to track the registry and file access information > to see whether you receive "Access Denied" error and take corresponding > action. > > 1. perform the following steps to use the FileMon tool to monitor the file > access when you double click an Word document: > > - Logon to the console of the terminal server as administrator. Click the > link below to download the tool named Filemon. > http://www.microsoft.com/technet/sysinternals/utilities/filemon.mspx > - Extract all the files from the ZIP file. > - Double click the Filemon.exe to run the tool. > - Click Clear icon on the toolbar. > - Try to reproduce the problem by launching the application as a normal > user. > - When the error message is popped up, please click the File menu and > uncheck "Capture Events". > - Click the menu File-> Save, save the log to a .log file. > > 2. Please perform the following steps to use the RegMon tool to monitor > the > file access when you open an Office application > > - Please download the Registry Monitor (regmon) tool from > http://www.microsoft.com/technet/sysinternals/ProcessesAndThreads/Regmon.msp > x > - Extract it and double click the regmon.exe to execute it. > - From the Options menu, select Filter/Highlight, click the Defaults > button > and click OK. > - Click the Edit menu and click Clear Display. > - Try to reproduce the problem by launching the application as a normal > user. > - When the error message is popped up, please click the File menu and > uncheck "Capture Events". > - Click the menu File-> Save, save the log to a .log file. > > I hope that the above information can be of assistance. > > Sincerely > Morgan Che > Microsoft Online Support > Microsoft Global Technical Support Center > > Get Secure! - www.microsoft.com/security > ===================================================== > When responding to posts, please "Reply to Group" via your newsreader so > that others may learn and benefit from your issue. > ===================================================== > This posting is provided "AS IS" with no warranties, and confers no > rights. > > > -------------------- > --->From: <stjoe5373(a)news.postalias> > --->Subject: Permissions > --->Date: Fri, 11 Jul 2008 08:17:30 -0400 > --->Lines: 10 > --->X-Priority: 3 > --->X-MSMail-Priority: Normal > --->X-Newsreader: Microsoft Outlook Express 6.00.2900.3138 > --->X-RFC2646: Format=Flowed; Original > --->X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.3198 > --->Message-ID: <#1YQYA14IHA.2064(a)TK2MSFTNGP02.phx.gbl> > --->Newsgroups: microsoft.public.windows.terminal_services > --->NNTP-Posting-Host: cblmdm72-240-127-118.buckeyecom.net 72.240.127.118 > --->Path: TK2MSFTNGHUB02.phx.gbl!TK2MSFTNGP01.phx.gbl!TK2MSFTNGP02.phx.gbl > --->Xref: TK2MSFTNGHUB02.phx.gbl > microsoft.public.windows.terminal_services:19041 > --->X-Tomcat-NG: microsoft.public.windows.terminal_services > ---> > --->Hi, > --->I'm using TS on a 2003 Server and I've got a user logging on and what > not. > --->I've installed a program with the > --->Admin account and I can install and run it just fine but when I try to > run > --->the program under the other user account > --->I'm getting a permission error. I can't seem to find where I change > the > --->permissions for a TS user so I can run the program. > --->Thanks Craig > ---> > ---> > ---> >
|
Next
|
Last
Pages: 1 2 Prev: Remote Application Center v3.0 Next: Windows Server 2008 Terminal Services in W2K AD Domain? |