Re: Set up an application to permanently run as admin w/o user int



I understand your problem, but I strongly disagree with your view
that this would be a "nice feature".
You would have a situation where installations are performed
totally out of your control, while other users are connected to the
TS and possibly even running the same application. That's a fast
road to disaster in my book.
Sounds to me like the application needs to be redesigned, at least
the update procedure. It shouldn't hang when a normal users tries
to run it, depite the fact that there is an update. In fact, it
shouldn't even check for updates when it is started by a non-
administrator.

_________________________________________________________
Vera Noest
MCSE, CCEA, Microsoft MVP - Terminal Server
TS troubleshooting: http://ts.veranoest.net
___ please respond in newsgroup, NOT by private email ___

=?Utf-8?B?Q2hhcw==?= <Chas@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote on 04
jun 2007 in microsoft.public.windows.terminal_services:

Actually in this instance yes :)

The application will hang if a non-admin user attempts to open
it as the application forces an automatic install of any
application updates. So the application is forcing the TS into
install mode but with a limited user account the update would
fail. I wouldn't want to give out Admin access to any part of
the TS or any other applications besides for this upgrade
application.

This would be a nice feature to implement so that limited TS
users can permanently run any application as admins without
raising their entire security level to that of an admin.

"Vera Noest [MVP]" wrote:

I don't think that it's possible, but even if it were:
do you really want your users to be able to install programs?
Note that for every installation (and an upgrade *is* an
installation), the server nust be put into "install mode", and
no users should be connected to the server at the time you
install the upgrade.

_________________________________________________________
Vera Noest
MCSE, CCEA, Microsoft MVP - Terminal Server
TS troubleshooting: http://ts.veranoest.net
___ please respond in newsgroup, NOT by private email ___

=?Utf-8?B?Q2hhcw==?= <Chas@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote on
02 jun 2007 in microsoft.public.windows.terminal_services:

Hey Techneties,
The question I have is regarding ts on a windows 2k3
advanced server. We
have an application that frequently gets updated however the
update will fail since the local users do not have admin
privledges for obvious reasons.

I have tried the run as command however it seems as if the
application
still asks for the credentials of the admin when the
application is launched. Is there a method of configuring the
icons to always run as the admin including when the base
application is changing?

So in more humanoid terms can I set up a permanent run as on
the icon that will not require the admin username and
password to be entered by my restricted users?

Thanks in advance,
Chas
.



Relevant Pages

  • Re: Dumping full information about users.
    ... When I try to the connect computer as the install admin (i.e. the dude i'd ... You should not use a local install of Outlook. ... > from the server to get a proper setup. ...
    (microsoft.public.windows.server.sbs)
  • Re: Trouble Launching Apps
    ... The application can only be run by the user admin - no other users, ... regardless if they also installed the app, ... installation, and WHILE THE SERVER IS STILL IN INSTALL MODE. ...
    (microsoft.public.windows.terminal_services)
  • Re: Set up an application to permanently run as admin w/o user int
    ... application to run as the admin. ... that this would be a "nice feature". ... MCSE, CCEA, Microsoft MVP - Terminal Server ... install mode but with a limited user account the update would ...
    (microsoft.public.windows.terminal_services)
  • Re: Deny Interactive Logon but Allow Runas
    ... users may also need to install a fix-pack, ... be an admin to install. ... if your secret app is really so bad ... As our users don't have local admin rights they usually have ...
    (microsoft.public.windowsxp.security_admin)
  • Installing Software and Permissions
    ... etc etc on my TS Server. ... Security group and they'll have TS admin permissions... ... Added TS_Admins to the Local group on the TS Server - Administrators ... member of the TS_Admins group and try and install a piece of software.... ...
    (microsoft.public.windows.terminal_services)