Forum Home
Press F1
 
Thread ID: 60925 2005-08-18 07:15:00 "Run as" on Domain Terminal Server Chilling_Silence (9) Press F1
Post ID Timestamp Content User
382066 2005-08-18 07:15:00 When trying to run an application as another user on a Domain Controller, I get the following error:

Windows cannot access the specified device, drive, path or file. You may not have appropriate permission to access the item

It even says that if I try and go "Run As" and enter my own details?!

Any ideas why?

Cheers


Chill.
Chilling_Silence (9)
382067 2005-08-19 12:42:00 Are you logged into the server via a terminal service connection or by sitting in front of it and being logged in? If via a terminal service then maybe a policy doesn't allow you to install. Try logging on directly to the server. Can you install other apps? berryb (99)
382068 2005-08-19 22:15:00 I dont have physical access to the server, its access via Remote Desktop.

I can run normal .exe's fine... just dont appear to "Run As"?
Chilling_Silence (9)
382069 2005-08-20 06:33:00 So I understand this right.

You can install/run apps fine using your own account via RDC. What account permission is this user name working under - domain admin, local administrator/s?

When logged onto the domain controller via RDC as another user you cannot install/run apps? What permissions does this account have?
berryb (99)
382070 2005-08-20 21:32:00 Umm.. Im in the "Domain Users" group, sgg-remotetsuseraccess group, and I think there's one other group that means I get pretty normal permissions.

I can run this application fine which uses a domain admin account to create users etc, this means we dont have to give out advanced permissions to users on the TS.

Does this help? I can find the name of that other group later when Im next on the TS :)
Chilling_Silence (9)
382071 2005-08-21 03:37:00 Looks as if it's just "normal" security. It's regarded as a very bad idea to have remote users using privileged accounts. The "Run As" could be a bit risky. *nix usually stops root from logging in remotely, or even using FTP.

Of course with Windows, the software's so stable and reliable you don't need security. :D
Graham L (2)
382072 2005-08-21 09:44:00 Nicely put Graham ;)

So in a nutshell its a no-go'er?!

Bugger
Chilling_Silence (9)
382073 2005-08-21 11:24:00 If I get a chance I will try "run as" from limited user account and let you know how I get on. I thought it could be done but maybe not. Never tried, I trust Microsoft :rolleyes: and use full rights for my login. berryb (99)
1