RE: Comparing User Permissions

Tech Tip: Click here to run a free scan for Windows Errors and optimize PC performance



Hello Customer,

Thank you for posting here.

According to your description, I understand that many user accounts unable
to open an accounting application via remote desktop. If I have
misunderstood the problem, please don't hesitate to let me know.

First, please let me know that:

1. Is this a SBS network?
2. How do you deploy your Terminal Server?

Based on my research, I suggest we try the following steps to see if we can
resolve this issue:

1. This is mostly a MYOB application issue. I suggest you first contact the
application vendor to confirm whether the application have a permissions
list to allow which user could run this application. Ensure all the users
who need to run it in the allow list of the application.

2. You mentioned the application will run with Domain admin rights. Please
check the user accounts whether in the domain admins group on SBS:

a. Open Server Management console on SBS
b. Locate on Security Groups node, double click Domain Adminis in right pane
c. Select Members tab, ensure all users who need to run MYOB in the allow
list.
d. Click OK

Then, test this issue.

3. Please try to create a new SBS domain user account, and then test this
issue:

a. Open Server Management console on SBS
b. Locate on Users node, click Add a User link in right pane
c. Go through the wizard and create a new user account. Please select
Administrator Template in the Template Selection page.

Then, test this issue.

If we cannot resolve the issue after we perform the above steps, please
help me collect some information for further investigation:

1. What error do you get when you run the MYOB via Remote Desktop? Please
capture screenshots on the error messages and send the pictures to me at
v-terliu@xxxxxxxxxxxxx

2. Please try to logon the problematic user on the Terminal Server locally,
and then try to run the MYOB. Do you get the same result?

3. Do you access the Terminal Server thru RWW or RDP directly?

I hope these steps will give you some help.

Thanks and have a nice day!

Best regards,

Terence Liu(MSFT)

Microsoft CSS Online Newsgroup Support

Get Secure! - www.microsoft.com/security

=====================================================
This newsgroup only focuses on SBS technical issues. If you have issues
regarding other Microsoft products, you'd better post in the corresponding
newsgroups so that they can be resolved in an efficient and timely manner.
You can locate the newsgroup here:
http://www.microsoft.com/communities/newsgroups/en-us/default.aspx

When opening a new thread via the web interface, we recommend you check the
"Notify me of replies" box to receive e-mail notifications when there are
any updates in your thread. When responding to posts via your newsreader,
please "Reply to Group" so that others may learn and benefit from your
issue.

Microsoft engineers can only focus on one issue per thread. Although we
provide other information for your reference, we recommend you post
different incidents in different threads to keep the thread clean. In doing
so, it will ensure your issues are resolved in a timely manner.

For urgent issues, you may want to contact Microsoft CSS directly. Please
check http://support.microsoft.com for regional support phone numbers.

Any input or comments in this thread are highly appreciated.
=====================================================

This posting is provided "AS IS" with no warranties, and confers no rights.

--------------------
| From: "Piloo" <piloo@xxxxxxxxxxxxxxx>
| Subject: Comparing User Permissions
| Date: Thu, 1 May 2008 09:27:54 +0100
| Lines: 15
| Message-ID: <C4A092FA-2283-4A87-8EA3-1881275AD56B@xxxxxxxxxxxxx>
| MIME-Version: 1.0
| Content-Type: text/plain;
| format=flowed;
| charset="iso-8859-1";
| reply-type=original
| Content-Transfer-Encoding: 7bit
| X-Priority: 3
| X-MSMail-Priority: Normal
| X-Newsreader: Microsoft Windows Mail 6.0.6001.18000
| X-MimeOLE: Produced By Microsoft MimeOLE V6.0.6001.18000
| X-MS-CommunityGroup-PostID: {C4A092FA-2283-4A87-8EA3-1881275AD56B}
| X-MS-CommunityGroup-MessageCategory:
{E4FCE0A9-75B4-4168-BFF9-16C22D8747EC}
| Newsgroups: microsoft.public.windows.server.sbs
| NNTP-Posting-Host: 78.149.177.254
| Path: TK2MSFTNGHUB02.phx.gbl!TK2MSFTNGP01.phx.gbl!TK2MSFTNGP02.phx.gbl
| Xref: TK2MSFTNGHUB02.phx.gbl microsoft.public.windows.server.sbs:105917
| X-Tomcat-NG: microsoft.public.windows.server.sbs
|
| Hi All,
|
| I have run into a problem with users accessing an application on a
Terminal
| Server on the domain. Suddenly, after 7 months of smooth running, ALL but
| one user can run an accounting application (MYOB) via Remote Desktop.
|
| I am therefore inclined to compare rights and permissions for this
(working)
| user against those who cannot. The application will run with Domain admin
| rights.
|
| Any suggestions?
|
| Regards
| Piloo
|
|

.



Relevant Pages

  • Re: Logoff / Slow Bootups / Outlook attachements / Outlook Not res
    ... Run this wizard for the 3 problematic user accounts. ... Best regards, ... Microsoft CSS Online Newsgroup Support ... This newsgroup only focuses on SBS technical issues. ...
    (microsoft.public.windows.server.sbs)
  • RE: Missing Group
    ... which creates user accounts and assigns rights ... this issue will not fail your SBS upgrade or migration. ... Microsoft CSS Online Newsgroup Support ...
    (microsoft.public.windows.server.sbs)
  • RE: Migrate Profiles between Servers in a Workgroup
    ... moveuser can be used for Local User Accounts. ... > server as NComputer. ... > Microsoft can make no representation concerning the content of these sites. ...
    (microsoft.public.windows.server.migration)
  • RE: Exchange not creating users
    ... Did you start POP3 service on SBS? ... Does this issue happen on all new user accounts or specific user account? ... Microsoft CSS Online Newsgroup Support ... This newsgroup only focuses on SBS technical issues. ...
    (microsoft.public.windows.server.sbs)
  • Re: Group Policy setting for restricting creation of local user accounts
    ... There is really no way to prohibit a Domain Admin from doing what ... if DA was not in each machine's local Administrators ... being able to create accounts on the computers. ... local computer user accounts when the computer is joined to the ...
    (microsoft.public.windows.group_policy)