why can' a domain user launch an app from terminal session?

  • Thread starter Thread starter Simon Xia
  • Start date Start date
S

Simon Xia

windows 2000 domain member server, terminal server in app mode, locally
installed app (.net windows form, in house developed)

a domain user can log on locally and run the program without problem. but if
she log on through terminal server session, she won't be able to launch the
app and get a access denied error from CLR.

also if i put the user into local admin group, she'll be able to launch it
in terminal session.

what could be changed to allow users from running this program from terminal
server just as regular user?

thanks a lot.

Simon
 
As with all permission related problems, I would download FileMon
and RegMon from http://www.sysinternals.com/. Run them as
administrator, start a TS session as a normal user and try to run
the application.

FileMon and RegMon will show you all "access denied" errors
that occur, so that you can give your users the necessary
permissions on a file-to file or Registry subkey basis.
 
besides file and registry, what else could be monitored? i didn't see
"access denied" message. any other access rights needed?

thanks a lot.

Simon
 
No, I wouldn't know of anything else, besides user rights like
"log on locally", but a lack of such rights would affect the
ability to start a rdp session itself, not running a single
application.

Since the application is developed inhouse, your best option seems
to talk with the developers. They should know what rights and
permissions are needed.
 
problem is, I'm the developer of the program.

what i did in the program was to use windows api (unmanaged code) to send
some key combinations to another legacy windows program (not in house) and
auto copy some field values and paste into my program. two dlls i loaded
were user32.dll and kernal32.dll (for sending keys and defining hot keys).

i used vb.net 2002 to do this.

Now on the target machine, the very first form screen won't show before i
got the clr error (access denied).

the user rights must be related to those APIs i called in the program. i
just don't want to gave them too many rights to screw my server.

thanks.

Simon
 
Back
Top