RE: Problem with SidWalk and ShowAccs asking for admin privelege

From: Jonas Back (jonasback_at_noway.com)
Date: 01/11/05 

Date: Tue, 11 Jan 2005 01:11:02 -0800

Hi Frances!

At first - it didn't work. I tried login locally instead of using TS - same
problem.

I did some more research and what I did then was to create a completely new
account in the domain and put that user in the local Administrators group of
the server - then it worked!! Before I used my personal account to login to
the server.

I haven't investigated further why this is a problem but I suspect one out
of the following:
- We use Redirected Folders to redirect user's profile to the users
Home-directory which is H:
- We still have SIDHistory enabled on all old accounts in the domain

This might be something to investigate but right now I'm just happy it works!

Thank you very much for your help and confirming it works in your lab!!

"Frances [MSFT]" wrote:

> Hi,
>
> I have tried the steps, however, it works on my side, please refer to the
> screen shot I sent you.
>
> The steps I have taken are as follows:
>
> 1.Use Terminal Service to logon to the Win Server 2003 which have
> ShowAccs.exe installed on the desktop.
>
> 2.Login using a DOMAIN user which is member of the local Administrators
> group. NOTE: This user account is only in domain users group, it is not a
> member of domain admins.
>
> 3.Start->run->cmd
>
> 4.Switch to desktop and enter "ShowAccs c:\test.csv /f c:\test"
>
> 5.It worked as shown in the attachment.
>
> Domain Admin also works well.
>
> I suggest double check if the account is in the local administrators group
> and run the command on the server directly without the terminal service.
> What is the result?
>
> In addition, please help me gather the following information:
> 1. Take a screen shot of the error you have receive and send it to
> v-franhe@microsoft.com for research.
> 2. Issue the command "rsop.msc" and save the result of the policy applied
> to this server.
> 3. Refer to the following article to gather MPSreport. This information
> will help us get more ideas about your machine's configuration.
> http://support.microsoft.com/default.aspx?scid=kb;en-us;818742
>
>
> Any update, let us get in touch!
>
>
> Frances He
>
>
> Microsoft Online Partner Support
> Get Secure! - www.microsoft.com/security
>
> =====================================================
>
> When responding to posts, please "Reply to Group" via your newsreader so
> that others may learn and benefit from your issue.
>
> =====================================================
> This posting is provided "AS IS" with no warranties, and confers no rights.
>
>
>

Relevant Pages

  • Re: Need Help with SharePoint Errors
    ... Any account that is in the local Administrators group on the SPS server has ... - Make sure that Anonymous Authentication is not enabled on the SharePoint ...
    (microsoft.public.sharepoint.portalserver)
  • Migration Question
    ... First off, it is not natural at all to have users in the Local Administrators group, so you are on the right track ... The mapping between SID and Profile path is done in the local registry of each workstation. ... Server to the 2nd Server and the PC has Domain Users as Local Power ...
    (microsoft.public.win2000.active_directory)
  • Re: SMS2003 and Dedicated SQL Server.
    ... To add machine accounts to the local administrators group on Windows 2000 ... The GUI only works on Windows 2000 DCs and Windows Server 2003 servers. ...
    (microsoft.public.sms.setup)
  • Re: Administrator account does not have rights
    ... >about an account that is a domain administrator, ... >check membership of the local administrators group anyhow ... >auditing of logon events and account management enabled ... I have a 2000 server and the administrator ...
    (microsoft.public.win2000.security)
  • Re: Administrator and Adminisrators
    ... in the same group of Local Administrators. ... And in this case the name of account is not the case, ... I have installed these on MANY machines as a Domain Admin account on a ... the local administrators group of the machine. ...
    (microsoft.public.windowsxp.security_admin)