Legacy apps on Windows Server 2003

  • Thread starter Thread starter Mark
  • Start date Start date
M

Mark

I couldn't find any news groups specific to Server 2003, so I hope this is
OK to post here.

We just installed a W2k3 server specifically for Terminal Services. We have
1 application that uses some fairly old controls that I'm guessing are
considered "legacy." When I allow all users to log in as Power Users, they
can run the program fine, but when I put them back to regular users, the
program doesn't work porperly.

I've read several articles about using secedit /configure /cfg compatws.inf
.... but that suggestion was written for 2000 Server and doesn't seem to
change anything on my 2003 Server. I can run the secedit command and it
seems to work fine, but regular users still can't run the application until
I re-promote them to Power User status.

Any ideas?
 
See the following link on configuring security templates for W2003. The compatws.inf
template should work because it gives users the same ntfs/registry permissions as
power users without the extra rights such as creating shares. Better yet, contact the
publisher and lean on them telling them due to security restrictions you need their
application to run as a regular user and need to know what ntfs/registry permissions
need to be changed. If they can not help you may be able to roll your own changes
using Filemon and Regmon from SysInternals [free]. Log on as a regular user and then
run them using runas with admin credentials just before trying to launch the
application. The when it fails, review the log to see where access was denied. Then
change the permission where access was denied for the user group and try again with
both programs until you have it working. Sometimes it is easy and sometime very
difficult, but worth a try . --- Steve

http://support.microsoft.com/default.aspx?scid=kb;en-us;816585
http://www.sysinternals.com/ntw2k/utilities.shtml
 
Sounds like a great start. Thanks Steve!


Steven L Umbach said:
See the following link on configuring security templates for W2003. The compatws.inf
template should work because it gives users the same ntfs/registry permissions as
power users without the extra rights such as creating shares. Better yet, contact the
publisher and lean on them telling them due to security restrictions you need their
application to run as a regular user and need to know what ntfs/registry permissions
need to be changed. If they can not help you may be able to roll your own changes
using Filemon and Regmon from SysInternals [free]. Log on as a regular user and then
run them using runas with admin credentials just before trying to launch the
application. The when it fails, review the log to see where access was denied. Then
change the permission where access was denied for the user group and try again with
both programs until you have it working. Sometimes it is easy and sometime very
difficult, but worth a try . --- Steve

http://support.microsoft.com/default.aspx?scid=kb;en-us;816585
http://www.sysinternals.com/ntw2k/utilities.shtml

I couldn't find any news groups specific to Server 2003, so I hope this is
OK to post here.

We just installed a W2k3 server specifically for Terminal Services. We have
1 application that uses some fairly old controls that I'm guessing are
considered "legacy." When I allow all users to log in as Power Users, they
can run the program fine, but when I put them back to regular users, the
program doesn't work porperly.

I've read several articles about using secedit /configure /cfg compatws.inf
... but that suggestion was written for 2000 Server and doesn't seem to
change anything on my 2003 Server. I can run the secedit command and it
seems to work fine, but regular users still can't run the application until
I re-promote them to Power User status.

Any ideas?
Click to expand...
Click to expand...
 
Back
Top