Guest jetmike Posted March 11, 2008 Posted March 11, 2008 I have an accounting application that is running on server 2003. The client piece works fine, but they wrote it so application backup needs to happen locally. I cant give the user Domain admin rights, but did allow remote desktop to the server. The user can logon but the backup wont run without elevated priveledges, and I dont see power users anymore. Any help would be great.
Guest Lanwench [MVP - Exchange] Posted March 11, 2008 Posted March 11, 2008 Re: allow user to run application on server 2003 jetmike <jetmike1@excite.com> wrote: > I have an accounting application that is running on server 2003. The > client piece works fine, but they wrote it so application backup needs > to happen locally. I cant give the user Domain admin rights, but did > allow remote desktop to the server. The user can logon but the backup > wont run without elevated priveledges, and I dont see power users > anymore. Any help would be great. Can't you use a scheduled task to run the backup?
Guest Kurt Posted March 11, 2008 Posted March 11, 2008 Re: allow user to run application on server 2003 I agree, a scheduled task would be best. Whatever account is used to do the backups will need the user right "Backup files and directories." -- Regards, Kurt Dillard Want some good security information? Check out some of my recent work... .. NIST Special Publication 800-28 Version 2, Guidelines on Active Content and Mobile Code (reviewer): http://csrc.nist.gov/publications/PubsSPs.html#800-28_Version2 .. Windows Server 2008 Security Resource Kit (coauthor): http://www.microsoft.com/MSPress/books/11841.aspx .. Windows Server 2008 Security Guide on TechNet (coauthor): http://www.microsoft.com/wssg "Lanwench [MVP - Exchange]" <lanwench@heybuddy.donotsendme.unsolicitedmailatyahoo.com> wrote in message news:ODjcuA4gIHA.4140@TK2MSFTNGP04.phx.gbl... > jetmike <jetmike1@excite.com> wrote: >> I have an accounting application that is running on server 2003. The >> client piece works fine, but they wrote it so application backup needs >> to happen locally. I cant give the user Domain admin rights, but did >> allow remote desktop to the server. The user can logon but the backup >> wont run without elevated priveledges, and I dont see power users >> anymore. Any help would be great. > > Can't you use a scheduled task to run the backup? >
Guest jetmike Posted March 11, 2008 Posted March 11, 2008 Re: allow user to run application on server 2003 On Mar 11, 11:32 am, "Kurt" <kurtdill...@msn.com> wrote: > I agree, a scheduled task would be best. Whatever account is used to do the > backups will need the user right "Backup files and directories." > > -- > Regards, > > Kurt Dillard > > Want some good security information? Check out some of my recent work... > . NIST Special Publication 800-28 Version 2, Guidelines on Active Content > and Mobile Code (reviewer): > http://csrc.nist.gov/publications/PubsSPs.html#800-28_Version2 > . Windows Server 2008 Security Resource Kit (coauthor): > http://www.microsoft.com/MSPress/books/11841.aspx > . Windows Server 2008 Security Guide on TechNet (coauthor): > http://www.microsoft.com/wssg > > "Lanwench [MVP - Exchange]"<lanwe...@heybuddy.donotsendme.unsolicitedmailatyahoo.com> wrote in message > > news:ODjcuA4gIHA.4140@TK2MSFTNGP04.phx.gbl... > > > > > jetmike <jetmi...@excite.com> wrote: > >> I have an accounting application that is running on server 2003. The > >> client piece works fine, but they wrote it so application backup needs > >> to happen locally. I cant give the user Domain admin rights, but did > >> allow remote desktop to the server. The user can logon but the backup > >> wont run without elevated priveledges, and I dont see power users > >> anymore. Any help would be great. > > > Can't you use a scheduled task to run the backup?- Hide quoted text - > > - Show quoted text - She is making changes in the application and to the database. She needs to have revision control. This cannot be automated, as she is done backup, more changes, backup.
Guest jetmike Posted March 11, 2008 Posted March 11, 2008 Re: allow user to run application on server 2003 On Mar 11, 9:51 am, "Lanwench [MVP - Exchange]" <lanwe...@heybuddy.donotsendme.unsolicitedmailatyahoo.com> wrote: > jetmike <jetmi...@excite.com> wrote: > > I have an accounting application that is running on server 2003. The > > client piece works fine, but they wrote it so application backup needs > > to happen locally. I cant give the user Domain admin rights, but did > > allow remote desktop to the server. The user can logon but the backup > > wont run without elevated priveledges, and I dont see power users > > anymore. Any help would be great. > > Can't you use a scheduled task to run the backup? This is needed for revision control, she backsup after each change or groups of changes so she has an available and known backup point. We run tape daily. \
Guest Lanwench [MVP - Exchange] Posted March 12, 2008 Posted March 12, 2008 Re: allow user to run application on server 2003 jetmike <jetmike1@excite.com> wrote: > On Mar 11, 9:51 am, "Lanwench [MVP - Exchange]" > <lanwe...@heybuddy.donotsendme.unsolicitedmailatyahoo.com> wrote: >> jetmike <jetmi...@excite.com> wrote: >>> I have an accounting application that is running on server 2003. The >>> client piece works fine, but they wrote it so application backup >>> needs to happen locally. I cant give the user Domain admin rights, >>> but did allow remote desktop to the server. The user can logon but >>> the backup wont run without elevated priveledges, and I dont see >>> power users anymore. Any help would be great. >> >> Can't you use a scheduled task to run the backup? > > This is needed for revision control, she backsup after each change or > groups of changes so she has an available and known backup point. We > run tape daily. > \ Then can you not direct the data output to a server drive- UNC or mapped drive? I'd have serious words with the application developer if not.
Guest jetmike Posted March 12, 2008 Posted March 12, 2008 Re: allow user to run application on server 2003 On Mar 11, 10:40 pm, "Lanwench [MVP - Exchange]" <lanwe...@heybuddy.donotsendme.unsolicitedmailatyahoo.com> wrote: > jetmike <jetmi...@excite.com> wrote: > > On Mar 11, 9:51 am, "Lanwench [MVP - Exchange]" > > <lanwe...@heybuddy.donotsendme.unsolicitedmailatyahoo.com> wrote: > >> jetmike <jetmi...@excite.com> wrote: > >>> I have an accounting application that is running on server 2003. The > >>> client piece works fine, but they wrote it so application backup > >>> needs to happen locally. I cant give the user Domain admin rights, > >>> but did allow remote desktop to the server. The user can logon but > >>> the backup wont run without elevated priveledges, and I dont see > >>> power users anymore. Any help would be great. > > >> Can't you use a scheduled task to run the backup? > > > This is needed for revision control, she backsup after each change or > > groups of changes so she has an available and known backup point. We > > run tape daily. > > \ > > Then can you not direct the data output to a server drive- UNC or mapped > drive? > I'd have serious words with the application developer if not.- Hide quoted text - > > - Show quoted text - The worst part is that it is a client/server application, with the database and app on the server and the app on the client. The client side wont backup to the server share, unless it is run from the app installed on the server. I am calling the app developer today. I still dont understand why the user cannot run the application in an RDP session on the server.
Guest Lanwench [MVP - Exchange] Posted March 12, 2008 Posted March 12, 2008 Re: allow user to run application on server 2003 jetmike <jetmike1@excite.com> wrote: > On Mar 11, 10:40 pm, "Lanwench [MVP - Exchange]" > <lanwe...@heybuddy.donotsendme.unsolicitedmailatyahoo.com> wrote: >> jetmike <jetmi...@excite.com> wrote: >>> On Mar 11, 9:51 am, "Lanwench [MVP - Exchange]" >>> <lanwe...@heybuddy.donotsendme.unsolicitedmailatyahoo.com> wrote: >>>> jetmike <jetmi...@excite.com> wrote: >>>>> I have an accounting application that is running on server 2003. >>>>> The client piece works fine, but they wrote it so application >>>>> backup needs to happen locally. I cant give the user Domain admin >>>>> rights, but did allow remote desktop to the server. The user can >>>>> logon but the backup wont run without elevated priveledges, and I >>>>> dont see power users anymore. Any help would be great. >> >>>> Can't you use a scheduled task to run the backup? >> >>> This is needed for revision control, she backsup after each change >>> or groups of changes so she has an available and known backup >>> point. We run tape daily. >>> \ >> >> Then can you not direct the data output to a server drive- UNC or >> mapped >> drive? >> I'd have serious words with the application developer if not.- Hide >> quoted text - >> >> - Show quoted text - > > The worst part is that it is a client/server application, with the > database and app on the server and the app on the client. The client > side wont backup to the server share, unless it is run from the app > installed on the server. I am calling the app developer today. I still > dont understand why the user cannot run the application in an RDP > session on the server. That's nuts - so the client application (on the workstation) doesn't have the same options as the client application (on the server)? Are you sure you need to use this particular software??
Guest jetmike Posted March 13, 2008 Posted March 13, 2008 Re: allow user to run application on server 2003 On Mar 12, 1:33 pm, "Lanwench [MVP - Exchange]" <lanwe...@heybuddy.donotsendme.unsolicitedmailatyahoo.com> wrote: > jetmike <jetmi...@excite.com> wrote: > > On Mar 11, 10:40 pm, "Lanwench [MVP - Exchange]" > > <lanwe...@heybuddy.donotsendme.unsolicitedmailatyahoo.com> wrote: > >> jetmike <jetmi...@excite.com> wrote: > >>> On Mar 11, 9:51 am, "Lanwench [MVP - Exchange]" > >>> <lanwe...@heybuddy.donotsendme.unsolicitedmailatyahoo.com> wrote: > >>>> jetmike <jetmi...@excite.com> wrote: > >>>>> I have an accounting application that is running on server 2003. > >>>>> The client piece works fine, but they wrote it so application > >>>>> backup needs to happen locally. I cant give the user Domain admin > >>>>> rights, but did allow remote desktop to the server. The user can > >>>>> logon but the backup wont run without elevated priveledges, and I > >>>>> dont see power users anymore. Any help would be great. > > >>>> Can't you use a scheduled task to run the backup? > > >>> This is needed for revision control, she backsup after each change > >>> or groups of changes so she has an available and known backup > >>> point. We run tape daily. > >>> \ > > >> Then can you not direct the data output to a server drive- UNC or > >> mapped > >> drive? > >> I'd have serious words with the application developer if not.- Hide > >> quoted text - > > >> - Show quoted text - > > > The worst part is that it is a client/server application, with the > > database and app on the server and the app on the client. The client > > side wont backup to the server share, unless it is run from the app > > installed on the server. I am calling the app developer today. I still > > dont understand why the user cannot run the application in an RDP > > session on the server. > > That's nuts - so the client application (on the workstation) doesn't have > the same options as the client application (on the server)? > > Are you sure you need to use this particular software??- Hide quoted text - > > - Show quoted text - I didnt choose the software, cant imagine they will change it for me. The app has the option it just wont function unless executed on the same machine. YES ITS NUTS!!! So why cant she run hte app in an RDP session?
Guest Lanwench [MVP - Exchange] Posted March 13, 2008 Posted March 13, 2008 Re: allow user to run application on server 2003 jetmike <jetmike1@excite.com> wrote: > On Mar 12, 1:33 pm, "Lanwench [MVP - Exchange]" > <lanwe...@heybuddy.donotsendme.unsolicitedmailatyahoo.com> wrote: >> jetmike <jetmi...@excite.com> wrote: >>> On Mar 11, 10:40 pm, "Lanwench [MVP - Exchange]" >>> <lanwe...@heybuddy.donotsendme.unsolicitedmailatyahoo.com> wrote: >>>> jetmike <jetmi...@excite.com> wrote: >>>>> On Mar 11, 9:51 am, "Lanwench [MVP - Exchange]" >>>>> <lanwe...@heybuddy.donotsendme.unsolicitedmailatyahoo.com> wrote: >>>>>> jetmike <jetmi...@excite.com> wrote: >>>>>>> I have an accounting application that is running on server 2003. >>>>>>> The client piece works fine, but they wrote it so application >>>>>>> backup needs to happen locally. I cant give the user Domain >>>>>>> admin rights, but did allow remote desktop to the server. The >>>>>>> user can logon but the backup wont run without elevated >>>>>>> priveledges, and I dont see power users anymore. Any help would >>>>>>> be great. >> >>>>>> Can't you use a scheduled task to run the backup? >> >>>>> This is needed for revision control, she backsup after each change >>>>> or groups of changes so she has an available and known backup >>>>> point. We run tape daily. >>>>> \ >> >>>> Then can you not direct the data output to a server drive- UNC or >>>> mapped >>>> drive? >>>> I'd have serious words with the application developer if not.- Hide >>>> quoted text - >> >>>> - Show quoted text - >> >>> The worst part is that it is a client/server application, with the >>> database and app on the server and the app on the client. The client >>> side wont backup to the server share, unless it is run from the app >>> installed on the server. I am calling the app developer today. I >>> still dont understand why the user cannot run the application in an >>> RDP session on the server. >> >> That's nuts - so the client application (on the workstation) doesn't >> have the same options as the client application (on the server)? >> >> Are you sure you need to use this particular software??- Hide quoted >> text - >> >> - Show quoted text - > > I didnt choose the software, cant imagine they will change it for me. If it doesn't do what you need, your company should listen to you. Or your company should re-evaluate the need for her to do these backups herself and just do them automatically on the server/scheduled, which is how this stuff normally works. > The app has the option it just wont function unless executed on the > same machine. YES ITS NUTS!!! > So why cant she run hte app in an RDP session? Dunno. I don't know what kind of server this is. If this is a file server only, I suppose she could, and you could see what happens if she tries. If it's a DC or has any other roles on your network, forget it....users should *never* be able to log in there.
Recommended Posts