RE: User rights on Terminal Services

From: Sullivan, Glenn (GSullivan@DavidClark.com)
Date: 03/07/03

  • Next message: disciple: "RE: User rights on Terminal Services" 
    From: "Sullivan, Glenn" <GSullivan@DavidClark.com>
To: focus-ms@securityfocus.com
Date: Fri, 7 Mar 2003 07:35:09 -0500

    First off, I'm assuming you installed the application in "Install Mode"...

    Go to www.sysinternals.com and download regmon and filemon.

    Log onto the TS twice: once as an admin, and once as a regular user.

    In the admin session, run regmon and filemon. You will probably have to
    play with the "filter" controls to avoid a deluge of information.

    Run the applications in the regular user sessions, and look for "Access
    Denied" or other errors in the RegMon and FileMon windows.

    Change the permissions on those objects that are required, and off you go.

    Hope this helps,

    Glenn Sullivan, MCSE+I MCDBA
    David Clark Company Inc.

    -----Original Message-----
    From: Antoine Borg [mailto:antoineborg@onvol.net]
    Sent: Thursday, March 06, 2003 2:15 PM
    To: focus-ms@securityfocus.com
    Subject: User rights on Terminal Services

    Hi ..

    Win2k Server with all latest patches and Terminal Services installed.

    We have a custom built application that we got from a third-party that is
    causing problems through terminal services. Through my login the program
    works w/o problems but I am an administrator and do not wish to have to
    assign admin rights to every user who may need to access the stuff remotely.

    Can anyone give me an indication as to what rights one may need for:

    1) Opening and closing files from a folder on the server (I gave the
    respective users full rights on these folders, but the problems still crop
    up)
    2) Creating/loading/using ActiveX Controls and COM servers.

    I am not sure if there is any registry tomfoolery in it - what is the best
    way to discover if the program uses the registry? (I'm slightly new at this;
    I realise this is a newbie question, so go easy on me)

    Oh, FYI, the problems I refer to are all ActiveX related and refer to the
    fact that some controls cannot be loaded and/or created properly.

    Thanks

    Antoine

    ----------
    Indecision is the key to flexibility.

  • Next message: disciple: "RE: User rights on Terminal Services"

    Relevant Pages

    • Re: Administrator Help
      ... The process can be a little effort, when using the filemon ... ability to write in the install area on disk (and to destroy the ... the applications area in the registry, ... For finding these the regmon and filemon tools are a great ...
      (microsoft.public.security)
    • Re: Please recommend a newsreader that can d
      ... files nec to install some of the larger programs to a flash drive manually. ... I guess I'm going to have to also look up filemon, regmon, and mojopac, ... Filemon and regmon track access to the file system and Windows registry in ...
      (rec.gambling.poker)
    • Re: Failed To Install Any Update From Web Only
      ... > Did the Filemon concurent with Regmon. ... The timestamp and the length of 107 tells me that if I found a record ... E.g. we suspect that invoking verbose logging on a manual install will not ...
      (microsoft.public.windowsupdate)
    • Re: Cannot Install Updates
      ... >> Shouldn't FileMon show you an access here which does not happen ... > laptop install. ... you could try running RegMon ... Then you would have something specific to look for in a RegMon trace. ...
      (microsoft.public.windowsupdate)
    • RE: User Access - need admin rights
      ... I was able to run regmon and I found accdenied ... on certain reg keys and such. ... giving them ADMIN rights? ... filemon] for the errors encountered. ...
      (microsoft.public.win2000.termserv.apps)