Re: Set up an application to permanently run as admin w/o user int

Vera,
Even though your points that you bring up about the application being
redesigned are somehwhat valid to me this feature would be a nice addition
and would allow for more flexibility than we have currently from the admin
side. My situation is basically that I could care less about who runs the
software upgrade but just need to make sure whoever it is needs that
application to run as the admin. To me there is no real damage in allowing a
user to run this app as an admin.

But I do appreciate your technical input :~)

"Vera Noest [MVP]" wrote:

I understand your problem, but I strongly disagree with your view
that this would be a "nice feature".
You would have a situation where installations are performed
totally out of your control, while other users are connected to the
TS and possibly even running the same application. That's a fast
road to disaster in my book.
Sounds to me like the application needs to be redesigned, at least
the update procedure. It shouldn't hang when a normal users tries
to run it, depite the fact that there is an update. In fact, it
shouldn't even check for updates when it is started by a non-
administrator.

_________________________________________________________
Vera Noest
MCSE, CCEA, Microsoft MVP - Terminal Server
TS troubleshooting: http://ts.veranoest.net
___ please respond in newsgroup, NOT by private email ___

=?Utf-8?B?Q2hhcw==?= <Chas@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote on 04
jun 2007 in microsoft.public.windows.terminal_services:

Actually in this instance yes :)

The application will hang if a non-admin user attempts to open
it as the application forces an automatic install of any
application updates. So the application is forcing the TS into
install mode but with a limited user account the update would
fail. I wouldn't want to give out Admin access to any part of
the TS or any other applications besides for this upgrade
application.

This would be a nice feature to implement so that limited TS
users can permanently run any application as admins without
raising their entire security level to that of an admin.

"Vera Noest [MVP]" wrote:

I don't think that it's possible, but even if it were:
do you really want your users to be able to install programs?
Note that for every installation (and an upgrade *is* an
installation), the server nust be put into "install mode", and
no users should be connected to the server at the time you
install the upgrade.

_________________________________________________________
Vera Noest
MCSE, CCEA, Microsoft MVP - Terminal Server
TS troubleshooting: http://ts.veranoest.net
___ please respond in newsgroup, NOT by private email ___

=?Utf-8?B?Q2hhcw==?= <Chas@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote on
02 jun 2007 in microsoft.public.windows.terminal_services:

Hey Techneties,
The question I have is regarding ts on a windows 2k3
advanced server. We
have an application that frequently gets updated however the
update will fail since the local users do not have admin
privledges for obvious reasons.

I have tried the run as command however it seems as if the
application
still asks for the credentials of the admin when the
application is launched. Is there a method of configuring the
icons to always run as the admin including when the base
application is changing?

So in more humanoid terms can I set up a permanent run as on
the icon that will not require the admin username and
password to be entered by my restricted users?

Thanks in advance,
Chas

.

Relevant Pages

  • Re: Dumping full information about users.
    ... When I try to the connect computer as the install admin (i.e. the dude i'd ... You should not use a local install of Outlook. ... > from the server to get a proper setup. ...
    (microsoft.public.windows.server.sbs)
  • Re: Trouble Launching Apps
    ... The application can only be run by the user admin - no other users, ... regardless if they also installed the app, ... installation, and WHILE THE SERVER IS STILL IN INSTALL MODE. ...
    (microsoft.public.windows.terminal_services)
  • Re: Deny Interactive Logon but Allow Runas
    ... users may also need to install a fix-pack, ... be an admin to install. ... if your secret app is really so bad ... As our users don't have local admin rights they usually have ...
    (microsoft.public.windowsxp.security_admin)
  • Installing Software and Permissions
    ... etc etc on my TS Server. ... Security group and they'll have TS admin permissions... ... Added TS_Admins to the Local group on the TS Server - Administrators ... member of the TS_Admins group and try and install a piece of software.... ...
    (microsoft.public.windows.terminal_services)
  • Re: Set up an application to permanently run as admin w/o user int
    ... MCSE, CCEA, Microsoft MVP - Terminal Server ... install mode but with a limited user account the update would ... This would be a nice feature to implement so that limited TS ... raising their entire security level to that of an admin. ...
    (microsoft.public.windows.terminal_services)