allow user to run application on server 2003

[Guest jetmike]

I have an accounting application that is running on server 2003. The

client piece works fine, but they wrote it so application backup needs

to happen locally. I cant give the user Domain admin rights, but did

allow remote desktop to the server. The user can logon but the backup

wont run without elevated priveledges, and I dont see power users

anymore. Any help would be great.

[Guest Lanwench [MVP - Exchange]]

Re: allow user to run application on server 2003

 

jetmike <jetmike1@excite.com> wrote:

> I have an accounting application that is running on server 2003. The

> client piece works fine, but they wrote it so application backup needs

> to happen locally. I cant give the user Domain admin rights, but did

> allow remote desktop to the server. The user can logon but the backup

> wont run without elevated priveledges, and I dont see power users

> anymore. Any help would be great.

 

Can't you use a scheduled task to run the backup?

[Guest Kurt]

Re: allow user to run application on server 2003

 

I agree, a scheduled task would be best. Whatever account is used to do the

backups will need the user right "Backup files and directories."

 

--

Regards,

 

Kurt Dillard

 

Want some good security information? Check out some of my recent work...

.. NIST Special Publication 800-28 Version 2, Guidelines on Active Content

and Mobile Code (reviewer):

http://csrc.nist.gov/publications/PubsSPs.html#800-28_Version2

.. Windows Server 2008 Security Resource Kit (coauthor):

http://www.microsoft.com/MSPress/books/11841.aspx

.. Windows Server 2008 Security Guide on TechNet (coauthor):

http://www.microsoft.com/wssg

 

 

"Lanwench [MVP - Exchange]"

<lanwench@heybuddy.donotsendme.unsolicitedmailatyahoo.com> wrote in message

news:ODjcuA4gIHA.4140@TK2MSFTNGP04.phx.gbl...

> jetmike <jetmike1@excite.com> wrote:

>> I have an accounting application that is running on server 2003. The

>> client piece works fine, but they wrote it so application backup needs

>> to happen locally. I cant give the user Domain admin rights, but did

>> allow remote desktop to the server. The user can logon but the backup

>> wont run without elevated priveledges, and I dont see power users

>> anymore. Any help would be great.

>

> Can't you use a scheduled task to run the backup?

>

[Guest jetmike]

Re: allow user to run application on server 2003

 

On Mar 11, 11:32 am, "Kurt" <kurtdill...@msn.com> wrote:

> I agree,  a scheduled task would be best. Whatever account is used to do the

> backups will need the user right "Backup files and directories."

>

> --

> Regards,

>

> Kurt Dillard

>

> Want some good security information? Check out some of my recent work...

> . NIST Special Publication 800-28 Version 2, Guidelines on Active Content

> and Mobile Code (reviewer):

>        http://csrc.nist.gov/publications/PubsSPs.html#800-28_Version2

> . Windows Server 2008 Security Resource Kit (coauthor):

>        http://www.microsoft.com/MSPress/books/11841.aspx

> . Windows Server 2008 Security Guide on TechNet (coauthor):

>        http://www.microsoft.com/wssg

>

> "Lanwench [MVP - Exchange]"<lanwe...@heybuddy.donotsendme.unsolicitedmailatyahoo.com> wrote in message

>

> news:ODjcuA4gIHA.4140@TK2MSFTNGP04.phx.gbl...

>

>

>

> > jetmike <jetmi...@excite.com> wrote:

> >> I have an accounting application that is running on server 2003. The

> >> client piece works fine, but they wrote it so application backup needs

> >> to happen locally. I cant give the user Domain admin rights, but did

> >> allow remote desktop to the server. The user can logon but the backup

> >> wont run without elevated priveledges, and I dont see power users

> >> anymore. Any help would be great.

>

> > Can't you use a scheduled task to run the backup?- Hide quoted text -

>

> - Show quoted text -

 

She is making changes in the application and to the database. She

needs to have revision control. This cannot be automated, as she is

done backup, more changes, backup.

[Guest jetmike]

Re: allow user to run application on server 2003

 

On Mar 11, 9:51 am, "Lanwench [MVP - Exchange]"

<lanwe...@heybuddy.donotsendme.unsolicitedmailatyahoo.com> wrote:

> jetmike <jetmi...@excite.com> wrote:

> > I have an accounting application that is running on server 2003. The

> > client piece works fine, but they wrote it so application backup needs

> > to happen locally. I cant give the user Domain admin rights, but did

> > allow remote desktop to the server. The user can logon but the backup

> > wont run without elevated priveledges, and I dont see power users

> > anymore. Any help would be great.

>

> Can't you use a scheduled task to run the backup?

 

This is needed for revision control, she backsup after each change or

groups of changes so she has an available and known backup point. We

run tape daily.

\

[Guest Lanwench [MVP - Exchange]]

Re: allow user to run application on server 2003

 

jetmike <jetmike1@excite.com> wrote:

> On Mar 11, 9:51 am, "Lanwench [MVP - Exchange]"

> <lanwe...@heybuddy.donotsendme.unsolicitedmailatyahoo.com> wrote:

>> jetmike <jetmi...@excite.com> wrote:

>>> I have an accounting application that is running on server 2003. The

>>> client piece works fine, but they wrote it so application backup

>>> needs to happen locally. I cant give the user Domain admin rights,

>>> but did allow remote desktop to the server. The user can logon but

>>> the backup wont run without elevated priveledges, and I dont see

>>> power users anymore. Any help would be great.

>>

>> Can't you use a scheduled task to run the backup?

>

> This is needed for revision control, she backsup after each change or

> groups of changes so she has an available and known backup point. We

> run tape daily.

> \

 

Then can you not direct the data output to a server drive- UNC or mapped

drive?

I'd have serious words with the application developer if not.

[Guest jetmike]

Re: allow user to run application on server 2003

 

On Mar 11, 10:40 pm, "Lanwench [MVP - Exchange]"

<lanwe...@heybuddy.donotsendme.unsolicitedmailatyahoo.com> wrote:

> jetmike <jetmi...@excite.com> wrote:

> > On Mar 11, 9:51 am, "Lanwench [MVP - Exchange]"

> > <lanwe...@heybuddy.donotsendme.unsolicitedmailatyahoo.com> wrote:

> >> jetmike <jetmi...@excite.com> wrote:

> >>> I have an accounting application that is running on server 2003. The

> >>> client piece works fine, but they wrote it so application backup

> >>> needs to happen locally. I cant give the user Domain admin rights,

> >>> but did allow remote desktop to the server. The user can logon but

> >>> the backup wont run without elevated priveledges, and I dont see

> >>> power users anymore. Any help would be great.

>

> >> Can't you use a scheduled task to run the backup?

>

> > This is needed for revision control, she backsup after each change or

> > groups of changes so she has an available and known backup point. We

> > run tape daily.

> > \

>

> Then can you not direct the data output to a server drive- UNC or mapped

> drive?

> I'd have serious words with the application developer if not.- Hide quoted text -

>

> - Show quoted text -

 

The worst part is that it is a client/server application, with the

database and app on the server and the app on the client. The client

side wont backup to the server share, unless it is run from the app

installed on the server. I am calling the app developer today. I still

dont understand why the user cannot run the application in an RDP

session on the server.

[Guest Lanwench [MVP - Exchange]]

Re: allow user to run application on server 2003

 

jetmike <jetmike1@excite.com> wrote:

> On Mar 11, 10:40 pm, "Lanwench [MVP - Exchange]"

> <lanwe...@heybuddy.donotsendme.unsolicitedmailatyahoo.com> wrote:

>> jetmike <jetmi...@excite.com> wrote:

>>> On Mar 11, 9:51 am, "Lanwench [MVP - Exchange]"

>>> <lanwe...@heybuddy.donotsendme.unsolicitedmailatyahoo.com> wrote:

>>>> jetmike <jetmi...@excite.com> wrote:

>>>>> I have an accounting application that is running on server 2003.

>>>>> The client piece works fine, but they wrote it so application

>>>>> backup needs to happen locally. I cant give the user Domain admin

>>>>> rights, but did allow remote desktop to the server. The user can

>>>>> logon but the backup wont run without elevated priveledges, and I

>>>>> dont see power users anymore. Any help would be great.

>>

>>>> Can't you use a scheduled task to run the backup?

>>

>>> This is needed for revision control, she backsup after each change

>>> or groups of changes so she has an available and known backup

>>> point. We run tape daily.

>>> \

>>

>> Then can you not direct the data output to a server drive- UNC or

>> mapped

>> drive?

>> I'd have serious words with the application developer if not.- Hide

>> quoted text -

>>

>> - Show quoted text -

>

> The worst part is that it is a client/server application, with the

> database and app on the server and the app on the client. The client

> side wont backup to the server share, unless it is run from the app

> installed on the server. I am calling the app developer today. I still

> dont understand why the user cannot run the application in an RDP

> session on the server.

 

That's nuts - so the client application (on the workstation) doesn't have

the same options as the client application (on the server)?

 

Are you sure you need to use this particular software??

[Guest jetmike]

Re: allow user to run application on server 2003

 

On Mar 12, 1:33 pm, "Lanwench [MVP - Exchange]"

<lanwe...@heybuddy.donotsendme.unsolicitedmailatyahoo.com> wrote:

> jetmike <jetmi...@excite.com> wrote:

> > On Mar 11, 10:40 pm, "Lanwench [MVP - Exchange]"

> > <lanwe...@heybuddy.donotsendme.unsolicitedmailatyahoo.com> wrote:

> >> jetmike <jetmi...@excite.com> wrote:

> >>> On Mar 11, 9:51 am, "Lanwench [MVP - Exchange]"

> >>> <lanwe...@heybuddy.donotsendme.unsolicitedmailatyahoo.com> wrote:

> >>>> jetmike <jetmi...@excite.com> wrote:

> >>>>> I have an accounting application that is running on server 2003.

> >>>>> The client piece works fine, but they wrote it so application

> >>>>> backup needs to happen locally. I cant give the user Domain admin

> >>>>> rights, but did allow remote desktop to the server. The user can

> >>>>> logon but the backup wont run without elevated priveledges, and I

> >>>>> dont see power users anymore. Any help would be great.

>

> >>>> Can't you use a scheduled task to run the backup?

>

> >>> This is needed for revision control, she backsup after each change

> >>> or groups of changes so she has an available and known backup

> >>> point. We run tape daily.

> >>> \

>

> >> Then can you not direct the data output to a server drive- UNC or

> >> mapped

> >> drive?

> >> I'd have serious words with the application developer if not.- Hide

> >> quoted text -

>

> >> - Show quoted text -

>

> > The worst part is that it is a client/server application, with the

> > database and app on the server and the app on the client. The client

> > side wont backup to the server share, unless it is run from the app

> > installed on the server. I am calling the app developer today. I still

> > dont understand why the user cannot run the application in an RDP

> > session on the server.

>

> That's nuts - so the client application (on the workstation) doesn't have

> the same options as the client application (on the server)?

>

> Are you sure you need to use this particular software??- Hide quoted text -

>

> - Show quoted text -

 

I didnt choose the software, cant imagine they will change it for me.

The app has the option it just wont function unless executed on the

same machine. YES ITS NUTS!!!

So why cant she run hte app in an RDP session?

[Guest Lanwench [MVP - Exchange]]

Re: allow user to run application on server 2003

 

jetmike <jetmike1@excite.com> wrote:

> On Mar 12, 1:33 pm, "Lanwench [MVP - Exchange]"

> <lanwe...@heybuddy.donotsendme.unsolicitedmailatyahoo.com> wrote:

>> jetmike <jetmi...@excite.com> wrote:

>>> On Mar 11, 10:40 pm, "Lanwench [MVP - Exchange]"

>>> <lanwe...@heybuddy.donotsendme.unsolicitedmailatyahoo.com> wrote:

>>>> jetmike <jetmi...@excite.com> wrote:

>>>>> On Mar 11, 9:51 am, "Lanwench [MVP - Exchange]"

>>>>> <lanwe...@heybuddy.donotsendme.unsolicitedmailatyahoo.com> wrote:

>>>>>> jetmike <jetmi...@excite.com> wrote:

>>>>>>> I have an accounting application that is running on server 2003.

>>>>>>> The client piece works fine, but they wrote it so application

>>>>>>> backup needs to happen locally. I cant give the user Domain

>>>>>>> admin rights, but did allow remote desktop to the server. The

>>>>>>> user can logon but the backup wont run without elevated

>>>>>>> priveledges, and I dont see power users anymore. Any help would

>>>>>>> be great.

>>

>>>>>> Can't you use a scheduled task to run the backup?

>>

>>>>> This is needed for revision control, she backsup after each change

>>>>> or groups of changes so she has an available and known backup

>>>>> point. We run tape daily.

>>>>> \

>>

>>>> Then can you not direct the data output to a server drive- UNC or

>>>> mapped

>>>> drive?

>>>> I'd have serious words with the application developer if not.- Hide

>>>> quoted text -

>>

>>>> - Show quoted text -

>>

>>> The worst part is that it is a client/server application, with the

>>> database and app on the server and the app on the client. The client

>>> side wont backup to the server share, unless it is run from the app

>>> installed on the server. I am calling the app developer today. I

>>> still dont understand why the user cannot run the application in an

>>> RDP session on the server.

>>

>> That's nuts - so the client application (on the workstation) doesn't

>> have the same options as the client application (on the server)?

>>

>> Are you sure you need to use this particular software??- Hide quoted

>> text -

>>

>> - Show quoted text -

>

> I didnt choose the software, cant imagine they will change it for me.

 

If it doesn't do what you need, your company should listen to you. Or your

company should re-evaluate the need for her to do these backups herself and

just do them automatically on the server/scheduled, which is how this stuff

normally works.

> The app has the option it just wont function unless executed on the

> same machine. YES ITS NUTS!!!

> So why cant she run hte app in an RDP session?

 

Dunno. I don't know what kind of server this is. If this is a file server

only, I suppose she could, and you could see what happens if she tries. If

it's a DC or has any other roles on your network, forget it....users should

*never* be able to log in there.