Re: Domain Users cant execute applications on SBServer

Hi John,

Thanks for your update.

This is very strange issue. You have good user which logon the workstation,
and you have bad user which logon TS. If you logon the good user to TS, can
it execute the application? If you logon the bad user to workstation, can
it execute the application?

Note: After you add domain users to TS local administrators, you need to
ensure all user logon TS is member of domain users on SBS.

I still suggest you install the application on the TS, and then make all
users run the application when logon the TS. But not run application thru
shared folder. It is not recommended method.

If there's anything else about this issue I can do for you, please do not
hesitate to let me know.

Thank you and have a nice day,

Best regards,

Terence Liu (MSFT)

Microsoft CSS Online Newsgroup Support

Get Secure! - www.microsoft.com/security

=====================================================
This newsgroup only focuses on SBS technical issues. If you have issues
regarding other Microsoft products, you'd better post in the corresponding
newsgroups so that they can be resolved in an efficient and timely manner.
You can locate the newsgroup here:
http://www.microsoft.com/communities/newsgroups/en-us/default.aspx

When opening a new thread via the web interface, we recommend you check the
"Notify me of replies" box to receive e-mail notifications when there are
any updates in your thread. When responding to posts via your newsreader,
please "Reply to Group" so that others may learn and benefit from your
issue.

Microsoft engineers can only focus on one issue per thread. Although we
provide other information for your reference, we recommend you post
different incidents in different threads to keep the thread clean. In doing
so, it will ensure your issues are resolved in a timely manner.

For urgent issues, you may want to contact Microsoft CSS directly. Please
check http://support.microsoft.com for regional support phone numbers.

Any input or comments in this thread are highly appreciated.
=====================================================

This posting is provided "AS IS" with no warranties, and confers no rights.

--------------------
NNTP-Posting-Date: Tue, 15 Jul 2008 03:09:47 -0500
From: John F Kappler <john@xxxxxxxxxxxxxx>
Newsgroups: microsoft.public.windows.server.sbs
Subject: Re: Domain Users cant execute applications on SBServer
Date: Tue, 15 Jul 2008 09:09:27 +0100
Message-ID: <mcmo741n3cjocjjk2qopb52rdm4ikouc7a@xxxxxxx>
References: <dva97418olenbd2233l1qo2bav9ningrvk@xxxxxxx>
<O0YNUWh4IHA.1056@xxxxxxxxxxxxxxxxxxxx>
<kaob745iin06eut7qddn8trmrb3kjhgmur@xxxxxxx>
<sU2Fdry4IHA.4688@xxxxxxxxxxxxxxxxxxxxxx>
X-Newsreader: Forte Free Agent 1.93/32.576 English (American)
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
Lines: 172
X-Usenet-Provider: http://www.giganews.com
NNTP-Posting-Host: 62.3.239.252
X-Trace:
sv3-hnHZvJnBK9D5YJG9jbKK9lU6xBLX5NEJXz+Ygz1KkbEUFPhH67K9EBtEhQtNBFqVRiiX3nUU
XaS06TU!yqmPOcTr7CZkzs+rhJsV6uKDKu9Yp2py7IK+uhPFB28lrNeLkaNDwm8449PSQDLdCXYM
TqtZm4sp!ybdby0KV0sRF338Hb84v
X-Complaints-To: abuse@xxxxxxxxxxxxx
X-DMCA-Complaints-To: abuse@xxxxxxxxxxxxx
X-Abuse-and-DMCA-Info: Please be sure to forward a copy of ALL headers
X-Abuse-and-DMCA-Info: Otherwise we will be unable to process your
complaint properly
X-Postfilter: 1.3.39
Bytes: 8158
X-Original-Bytes: 8094
Path:
TK2MSFTNGHUB02.phx.gbl!TK2MSFTNGP01.phx.gbl!TK2MSFTFEEDS01.phx.gbl!TK2MSFTFE
EDS02.phx.gbl!newsfeed00.sul.t-online.de!t-online.de!border2.nntp.dca.gigane
ws.com!Xl.tags.giganews.com!border1.nntp.dca.giganews.com!nntp.giganews.com!
local02.nntp.dca.giganews.com!nntp.pipex.net!news.pipex.net.POSTED!not-for-m
ail
Xref: TK2MSFTNGHUB02.phx.gbl microsoft.public.windows.server.sbs:115283
X-Tomcat-NG: microsoft.public.windows.server.sbs

Hi Terence.

Have now tried again as per your steps below.

Addind Domain Users to the Administrators on the Terminal Server
didn't make any difference.

However, I copied the application executable to the Terminal Server
and it did start running (albeit failing because it hadn't got its
installed files to work with).

So the problem still is that non-Administrator users, logging in to
the Terminal Server cant execute the application residing on the
SBServer, but that they can execute the application if initiated from
a Domain client PC.

I will talk to the application provider again to see if they can
suggest anything..........

John



On Fri, 11 Jul 2008 07:50:59 GMT, v-terliu@xxxxxxxxxxxxxxxxxxxx
(Terence Liu [MSFT]) wrote:

Hello John,

Thank you for your update.

I agree with SuperG, the program in fact is executed on the Terminal
Server. So I think, we need to ensure the logon user has permission to
execute the program on the Terminal Server.

Note: Maybe the program need to access TS registry or dll when running.

By default, the domain user logon workstation have administrator
permission
on the workstation. But it may be not when you logon domain user to the
Terminal Server. Therefore, I suggest we try the following steps:

1. Add the domain users group to Terminal Server local Administrators
group:

a. Logon Terminal Server with local administrator
b. Right click My Computer, select Manage
c. Select Local Users and Groups -> Groups
d. Double click Administrators, add Domain Users to the list
e. Click OK.

Then, test this issue.

2. Please try to logon the Terminal Server, access shared folder of the
program on SBS, copy the program to local of TS, then run the program. Do
you get the same issue?

If the issue persists after steps above, I think this may be the program
configuration issue. Please contact the program vendor for further
assistance.

I hope these steps will give you some help.

Thanks and have a nice day!

Best regards,

Terence Liu (MSFT)

Microsoft CSS Online Newsgroup Support

Get Secure! - www.microsoft.com/security

=====================================================
This newsgroup only focuses on SBS technical issues. If you have issues
regarding other Microsoft products, you'd better post in the
corresponding
newsgroups so that they can be resolved in an efficient and timely
manner.
You can locate the newsgroup here:
http://www.microsoft.com/communities/newsgroups/en-us/default.aspx

When opening a new thread via the web interface, we recommend you check
the
"Notify me of replies" box to receive e-mail notifications when there are
any updates in your thread. When responding to posts via your newsreader,
please "Reply to Group" so that others may learn and benefit from your
issue.

Microsoft engineers can only focus on one issue per thread. Although we
provide other information for your reference, we recommend you post
different incidents in different threads to keep the thread clean. In
doing
so, it will ensure your issues are resolved in a timely manner.

For urgent issues, you may want to contact Microsoft CSS directly. Please
check http://support.microsoft.com for regional support phone numbers.

Any input or comments in this thread are highly appreciated.
=====================================================

This posting is provided "AS IS" with no warranties, and confers no
rights.

--------------------
NNTP-Posting-Date: Thu, 10 Jul 2008 05:57:03 -0500
From: John F Kappler <john@xxxxxxxxxxxxxx>
Newsgroups: microsoft.public.windows.server.sbs
Subject: Re: Domain Users cant execute applications on SBServer
Date: Thu, 10 Jul 2008 11:56:47 +0100
Message-ID: <kaob745iin06eut7qddn8trmrb3kjhgmur@xxxxxxx>
References: <dva97418olenbd2233l1qo2bav9ningrvk@xxxxxxx>
<O0YNUWh4IHA.1056@xxxxxxxxxxxxxxxxxxxx>
X-Newsreader: Forte Free Agent 1.93/32.576 English (American)
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
Lines: 40
X-Usenet-Provider: http://www.giganews.com
NNTP-Posting-Host: 62.3.232.244
X-Trace:
sv3-xkS/0lre2l3pWM/FHsMP3LgQvCjHh+n5/lQNs645zeyRY/ClgrJLmjYJxskHrN/LRDGadY
m2
hISsBEx!cSFVdAfGvqigNhe9WZPIm0J2rSoZ/N61WiFsmq5NE87c8TffVGbGwuRwngjGM2WMdo
u3
beVr4roy!N3dZ1yxG/5GSITgSyqe0
X-Complaints-To: abuse@xxxxxxxxxxxxx
X-DMCA-Complaints-To: abuse@xxxxxxxxxxxxx
X-Abuse-and-DMCA-Info: Please be sure to forward a copy of ALL headers
X-Abuse-and-DMCA-Info: Otherwise we will be unable to process your
complaint properly
X-Postfilter: 1.3.39
Path:
TK2MSFTNGHUB02.phx.gbl!TK2MSFTNGP01.phx.gbl!TK2MSFTFEEDS02.phx.gbl!msrnews
..!
msrtrans!msrn-in!newshub.sdsu.edu!Xl.tags.giganews.com!border1.nntp.dca.gi
ga
news.com!nntp.giganews.com!local02.nntp.dca.giganews.com!nntp.pipex.net!ne
ws
pipex.net.POSTED!not-for-mail
Xref: TK2MSFTNGHUB02.phx.gbl microsoft.public.windows.server.sbs:114702
X-Tomcat-NG: microsoft.public.windows.server.sbs

On Thu, 10 Jul 2008 00:45:18 +0200, "Marina Roos [SBS-MVP]"
<marina@xxxxxxxxxxxxxxxxxxxxxxxxxx> wrote:

Hi John,

What kind of application is that on the SBS? The RWW group hasn't got
anything to do with this.

The SBServer has a third-party application on it. Each domain user
(local) has a client installation but all that does is setup a
shortcut to run a .exe file that lives on the SBS's C drive, in a
folder that is both shared and has Full Control access to Everyone.

This all works fine on the local domain.

The client installation has been run on the Terminal Server (by the
Administrator) and also works fine - for the Administrator.

However, if you logon to the TS as one of the above domain users (who
doesn't have Administrator privs) you get the error message shown in
my OP.

Everything else for the user seems to work okay, including
Outlook/Exchange e-mail, links to other network devices, etc., I've
also just checked that the user can see the relavent folder on the C
drive of the SBS, can access files therein, have permissions to
execute, but as soon as it is attempted, the error message occurs.

I do understand what Terence says about not running applications on
the SBServer but:
A) This application has been there for a long time with no problems
for domain users on client PCs. Its only when they login to TS, and;
B) I have another customer with applications on their SBServer which
they access from their TS without any problems.










.

Relevant Pages

  • Re: Domain Users cant execute applications on SBServer
    ... execute the program on the Terminal Server. ... the domain user logon workstation have administrator permission ... Add the domain users group to Terminal Server local Administrators group: ...
    (microsoft.public.windows.server.sbs)
  • Re: Domain Users cant execute applications on SBServer
    ... Addind Domain Users to the Administrators on the Terminal Server ... I copied the application executable to the Terminal Server ... but that they can execute the application if initiated from ... the domain user logon workstation have administrator permission ...
    (microsoft.public.windows.server.sbs)
  • Re: cannot logon to terminal server
    ... Users must be members of the local built-in Remote Desktop Users ... Note that they do *not* need the right to logon locally on the ... MCSE, CCEA, Microsoft MVP - Terminal Server ... All domain users are members of this group yet ...
    (microsoft.public.windows.terminal_services)
  • Re: Terminal Server and Local Policy
    ... It is not a question of "user profiles" (you can have those on Windows 98 ... A Terminal Server can not "override" client ... icon to connect to the Terminal Server, they can not logon to the Terminal ... "Remote Desktop Users" group have the right to logon via Terminal Services. ...
    (microsoft.public.windows.server.general)
  • Re: Terminal Server User Setup
    ... if you have published terminal services to internet. ... >> I already setup the Terminal Server and all users can connect to TS ... users can logon to domain through VPN and then ...
    (microsoft.public.windows.server.sbs)
Loading