Re: Security Problem With Windows 2003

From: Jason [MSFT] (jhoffman_at_online.microsoft.com)
Date: 11/25/03 

Date: Tue, 25 Nov 2003 00:49:22 GMT

Hey Ben,

        I assume the dialog you are talking about is when you right click on a
particular application icon and go to "Run as" there is a dialog that
allows you to run the application under the context of the current user and
still run it with restricted access. What it sounds like is that you are
logged on with an account that has admin rights and selecting this box is
denying some of those rights and causing the app to crash. You could go to
www.sysinternals.com and run "regmon" and "filemon" and find out were
exactly we are getting an "acc denied" and open up permissions manually

Jason Hoffman jhoffman@online.microsoft.com
MSCE,MSCA,CISSP, Security +
PSS Security
Available Mon.-Fri 9:00 a.m. - 6:00 p.m.

This posting is provided "AS IS" with no warranties, and confers no rights.

 

--------------------
| From: "Robert Moir" <bofh@mvps.org>
| References: <u#SfAkqsDHA.1088@tk2msftngp13.phx.gbl>
| Subject: Re: Security Problem With Windows 2003
| Date: Mon, 24 Nov 2003 20:48:15 -0000
| Lines: 16
| X-Priority: 3
| X-MSMail-Priority: Normal
| X-Newsreader: Microsoft Outlook Express 6.00.2800.1158
| X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1165
| Message-ID: <OXoqDxssDHA.2148@TK2MSFTNGP12.phx.gbl>
| Newsgroups: microsoft.public.windows.server.security
| NNTP-Posting-Host: cpc5-bedn1-3-0-cust242.lutn.cable.ntl.com
213.107.178.242
| Path:
cpmsftngxa07.phx.gbl!cpmsftngxa10.phx.gbl!TK2MSFTNGXA05.phx.gbl!TK2MSFTNGP08
.phx.gbl!TK2MSFTNGP12.phx.gbl
| Xref: cpmsftngxa07.phx.gbl microsoft.public.windows.server.security:1770
| X-Tomcat-NG: microsoft.public.windows.server.security
|
| Ben F. Marshall wrote:
| > I have a problem that has not been documented anywhere and a couple of
| > responses to previous posts has confused the issue. I have a Windows
| > 2003 server and when I double click on certain applications, I get
| > the hour glass for a second and then a normal mouse pointer. The
| > application does not run. I can get it to run, however, by right
| > clicking on the application and unchecking the "Run this program with
| > restricted access" and then clicking ok, the program runs immediately.
| >
| > I get no events or error codes.
| >
| > Does anyone have a suggestion?
|
| What programs? Are they supposed to be Windows 2003 compatible?
|
|
|

Relevant Pages

  • RE: which os version
    ... Microsoft MimeOLE V5.00.2615.200 is interpreted as: Microsoft Outlook Express ... I'm trying to determine a windows version from an e-mail. ... Astaro Security Linux -- firewall with Spam/Virus Protection ...
    (Pen-Test)
  • Re: File.Exists question
    ... > But I'm running with administrative rights, with full access to the files in> that directory. ... >> If you (the windows identity running the code) don't have the right ... windows>> user identity, these are fundamentally different. ... >> access rights for the objects controlled by the OS security ...
    (microsoft.public.dotnet.languages.csharp)
  • Access rights of administrators
    ... I am no expert on security in windows but I think a lot of the problems of lack of access are due to a default security setting which I mentioned in another thread. ... Select the group Everyone and then scroll down to the bottom of the rights list and you will probably see a tick in the Deny column against Special Permissions. ...
    (microsoft.public.windows.vista.administration_accounts_passwords)
  • RE: Simple way to update 2000 GPO?
    ... 307900 Upgrading Windows 2000 Group Policy for Windows XP ... This posting is provided "AS IS" with no warranties, and confers no rights. ... | X-Newsreader: Microsoft Outlook Express 6.00.2800.1409 ...
    (microsoft.public.win2000.active_directory)
  • Re: System.Security.Principal.WindowsImpersonation
    ... This posting is provided "AS IS" with no warranties, and confers no rights. ... >>' This sample can be run only on Windows XP. ... >>' proper execution presents a security risk. ... >>impersonate a user on this machine. ...
    (microsoft.public.dotnet.security)