Re: Domain Users cant execute applications on SBServer

Hi Terence.

Have now tried again as per your steps below.

Addind Domain Users to the Administrators on the Terminal Server
didn't make any difference.

However, I copied the application executable to the Terminal Server
and it did start running (albeit failing because it hadn't got its
installed files to work with).

So the problem still is that non-Administrator users, logging in to
the Terminal Server cant execute the application residing on the
SBServer, but that they can execute the application if initiated from
a Domain client PC.

I will talk to the application provider again to see if they can
suggest anything..........

John



On Fri, 11 Jul 2008 07:50:59 GMT, v-terliu@xxxxxxxxxxxxxxxxxxxx
(Terence Liu [MSFT]) wrote:

Hello John,

Thank you for your update.

I agree with SuperG, the program in fact is executed on the Terminal
Server. So I think, we need to ensure the logon user has permission to
execute the program on the Terminal Server.

Note: Maybe the program need to access TS registry or dll when running.

By default, the domain user logon workstation have administrator permission
on the workstation. But it may be not when you logon domain user to the
Terminal Server. Therefore, I suggest we try the following steps:

1. Add the domain users group to Terminal Server local Administrators group:

a. Logon Terminal Server with local administrator
b. Right click My Computer, select Manage
c. Select Local Users and Groups -> Groups
d. Double click Administrators, add Domain Users to the list
e. Click OK.

Then, test this issue.

2. Please try to logon the Terminal Server, access shared folder of the
program on SBS, copy the program to local of TS, then run the program. Do
you get the same issue?

If the issue persists after steps above, I think this may be the program
configuration issue. Please contact the program vendor for further
assistance.

I hope these steps will give you some help.

Thanks and have a nice day!

Best regards,

Terence Liu (MSFT)

Microsoft CSS Online Newsgroup Support

Get Secure! - www.microsoft.com/security

=====================================================
This newsgroup only focuses on SBS technical issues. If you have issues
regarding other Microsoft products, you'd better post in the corresponding
newsgroups so that they can be resolved in an efficient and timely manner.
You can locate the newsgroup here:
http://www.microsoft.com/communities/newsgroups/en-us/default.aspx

When opening a new thread via the web interface, we recommend you check the
"Notify me of replies" box to receive e-mail notifications when there are
any updates in your thread. When responding to posts via your newsreader,
please "Reply to Group" so that others may learn and benefit from your
issue.

Microsoft engineers can only focus on one issue per thread. Although we
provide other information for your reference, we recommend you post
different incidents in different threads to keep the thread clean. In doing
so, it will ensure your issues are resolved in a timely manner.

For urgent issues, you may want to contact Microsoft CSS directly. Please
check http://support.microsoft.com for regional support phone numbers.

Any input or comments in this thread are highly appreciated.
=====================================================

This posting is provided "AS IS" with no warranties, and confers no rights.

--------------------
NNTP-Posting-Date: Thu, 10 Jul 2008 05:57:03 -0500
From: John F Kappler <john@xxxxxxxxxxxxxx>
Newsgroups: microsoft.public.windows.server.sbs
Subject: Re: Domain Users cant execute applications on SBServer
Date: Thu, 10 Jul 2008 11:56:47 +0100
Message-ID: <kaob745iin06eut7qddn8trmrb3kjhgmur@xxxxxxx>
References: <dva97418olenbd2233l1qo2bav9ningrvk@xxxxxxx>
<O0YNUWh4IHA.1056@xxxxxxxxxxxxxxxxxxxx>
X-Newsreader: Forte Free Agent 1.93/32.576 English (American)
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
Lines: 40
X-Usenet-Provider: http://www.giganews.com
NNTP-Posting-Host: 62.3.232.244
X-Trace:
sv3-xkS/0lre2l3pWM/FHsMP3LgQvCjHh+n5/lQNs645zeyRY/ClgrJLmjYJxskHrN/LRDGadYm2
hISsBEx!cSFVdAfGvqigNhe9WZPIm0J2rSoZ/N61WiFsmq5NE87c8TffVGbGwuRwngjGM2WMdou3
beVr4roy!N3dZ1yxG/5GSITgSyqe0
X-Complaints-To: abuse@xxxxxxxxxxxxx
X-DMCA-Complaints-To: abuse@xxxxxxxxxxxxx
X-Abuse-and-DMCA-Info: Please be sure to forward a copy of ALL headers
X-Abuse-and-DMCA-Info: Otherwise we will be unable to process your
complaint properly
X-Postfilter: 1.3.39
Path:
TK2MSFTNGHUB02.phx.gbl!TK2MSFTNGP01.phx.gbl!TK2MSFTFEEDS02.phx.gbl!msrnews.!
msrtrans!msrn-in!newshub.sdsu.edu!Xl.tags.giganews.com!border1.nntp.dca.giga
news.com!nntp.giganews.com!local02.nntp.dca.giganews.com!nntp.pipex.net!news
pipex.net.POSTED!not-for-mail
Xref: TK2MSFTNGHUB02.phx.gbl microsoft.public.windows.server.sbs:114702
X-Tomcat-NG: microsoft.public.windows.server.sbs

On Thu, 10 Jul 2008 00:45:18 +0200, "Marina Roos [SBS-MVP]"
<marina@xxxxxxxxxxxxxxxxxxxxxxxxxx> wrote:

Hi John,

What kind of application is that on the SBS? The RWW group hasn't got
anything to do with this.

The SBServer has a third-party application on it. Each domain user
(local) has a client installation but all that does is setup a
shortcut to run a .exe file that lives on the SBS's C drive, in a
folder that is both shared and has Full Control access to Everyone.

This all works fine on the local domain.

The client installation has been run on the Terminal Server (by the
Administrator) and also works fine - for the Administrator.

However, if you logon to the TS as one of the above domain users (who
doesn't have Administrator privs) you get the error message shown in
my OP.

Everything else for the user seems to work okay, including
Outlook/Exchange e-mail, links to other network devices, etc., I've
also just checked that the user can see the relavent folder on the C
drive of the SBS, can access files therein, have permissions to
execute, but as soon as it is attempted, the error message occurs.

I do understand what Terence says about not running applications on
the SBServer but:
A) This application has been there for a long time with no problems
for domain users on client PCs. Its only when they login to TS, and;
B) I have another customer with applications on their SBServer which
they access from their TS without any problems.








.

Relevant Pages

  • Re: Domain Users cant execute applications on SBServer
    ... You have good user which logon the workstation, ... it execute the application? ... After you add domain users to TS local administrators, ... I copied the application executable to the Terminal Server ...
    (microsoft.public.windows.server.sbs)
  • Re: Domain Users cant execute applications on SBServer
    ... execute the program on the Terminal Server. ... the domain user logon workstation have administrator permission ... Add the domain users group to Terminal Server local Administrators group: ...
    (microsoft.public.windows.server.sbs)
  • Re: Domain Users cant execute applications on SBServer
    ... Can you run filemon/regmon on the terminal server to see what is ... What kind of application is that on the SBS? ... The client installation has been run on the Terminal Server (by the ... if you logon to the TS as one of the above domain users (who ...
    (microsoft.public.windows.server.sbs)
  • Re: cannot logon to terminal server
    ... Users must be members of the local built-in Remote Desktop Users ... Note that they do *not* need the right to logon locally on the ... MCSE, CCEA, Microsoft MVP - Terminal Server ... All domain users are members of this group yet ...
    (microsoft.public.windows.terminal_services)
  • Re: the local policy does not permit you to login interactively
    ... MCSE, CCEA, Microsoft MVP - Terminal Server ... TS troubleshooting: http://ts.veranoest.net ... user rights and even added the "Domain Users" group to the ... delete / recreate the Windows account from this user ...
    (microsoft.public.windows.terminal_services)