TS user Permission issue to network from TS server.

[Guest Ricus]

I have setup a TS server

 

Spec: 2.33GHZ quad core xeon

8GB Memory

80GB RAID Mirror

Win2k3R2 X64 (For +/- 10 Users running a Client server Accounting package

and Outlook.)

 

I have setup the TS profile paths and installed the software on the server

using the TS help wizard.

Relaxed TS permissions etc.

 

Disabled caching of offline files etc.

 

We do not use roaming profiles.(Hope this is a spur to get there acctually)

 

However I have a few issues.

 

MAJOR issue first

 

If I log in on the server as admin and use the accounting package (ACCPAC

setup as client server with local install pointing to a network server

serving the clients from a file share.) I can use it just fine through TS and

it works perfectly as ADMINISTRATOR.

 

However even after making one of the users that will use the server a local

admin;adding the users to the terminal servers local group etc.

 

I get a file permission/general permission error if I try and access the

accounting package as any of the users.

 

What I don't understand is if I run the package from a normal workstation as

the user it works perfectly with no errors. (The users are all part of a

group that has full access to the client files for the accounting package on

a network share).

 

 

The moment I run it from TS as one of the users I get the permissions error.

 

Less MAJOR issues I would like sorted

 

I need the temp profiles to be removed or kept small on user exit ;I would

like to have folder redirection enabled.

 

I would appreciate any and all help I am not very strong with TS.

[Guest Vera Noest [MVP]]

Re: TS user Permission issue to network from TS server.

 

Check if these help:

 

My application runs only for the Administrator who installed the

application, but not for normal users or other accounts with

Administrator rights

http://ts.veranoest.net/ts_faq_applications.htm#install_runonce

 

My application runs fine for Administrators, but not for normal

users

http://ts.veranoest.net/ts_faq_applications.htm#FileRegMon

 

_________________________________________________________

Vera Noest

MCSE, CCEA, Microsoft MVP - Terminal Server

TS troubleshooting: http://ts.veranoest.net

___ please respond in newsgroup, NOT by private email ___

 

=?Utf-8?B?UmljdXM=?= <Ricus@discussions.microsoft.com> wrote on 06

maj 2008 in microsoft.public.windows.terminal_services:

> I have setup a TS server

>

> Spec: 2.33GHZ quad core xeon

> 8GB Memory

> 80GB RAID Mirror

> Win2k3R2 X64 (For +/- 10 Users running a Client server

> Accounting package and Outlook.)

>

> I have setup the TS profile paths and installed the software on

> the server using the TS help wizard.

> Relaxed TS permissions etc.

>

> Disabled caching of offline files etc.

>

> We do not use roaming profiles.(Hope this is a spur to get there

> acctually)

>

> However I have a few issues.

>

> MAJOR issue first

>

> If I log in on the server as admin and use the accounting

> package (ACCPAC setup as client server with local install

> pointing to a network server serving the clients from a file

> share.) I can use it just fine through TS and it works perfectly

> as ADMINISTRATOR.

>

> However even after making one of the users that will use the

> server a local admin;adding the users to the terminal servers

> local group etc.

>

> I get a file permission/general permission error if I try and

> access the accounting package as any of the users.

>

> What I don't understand is if I run the package from a normal

> workstation as the user it works perfectly with no errors. (The

> users are all part of a group that has full access to the client

> files for the accounting package on a network share).

>

>

> The moment I run it from TS as one of the users I get the

> permissions error.

>

> Less MAJOR issues I would like sorted

>

> I need the temp profiles to be removed or kept small on user

> exit ;I would like to have folder redirection enabled.

>

> I would appreciate any and all help I am not very strong with

> TS.

[Guest Ricus]

Re: TS user Permission issue to network from TS server.

 

Thanks for the HELP i tried what is discribed in you links and no joy.

I keep getting the same error exactly for accessing all network files.

 

"Windows cannot access the specified device,path,or file. You may not have

the appropriate permissions to access the item"

 

Process monitor has no "ACCESS denied" messages but allot of "name not

found".

 

What else can I try.

 

"Vera Noest [MVP]" wrote:

> Check if these help:

>

> My application runs only for the Administrator who installed the

> application, but not for normal users or other accounts with

> Administrator rights

> http://ts.veranoest.net/ts_faq_applications.htm#install_runonce

>

> My application runs fine for Administrators, but not for normal

> users

> http://ts.veranoest.net/ts_faq_applications.htm#FileRegMon

>

> _________________________________________________________

> Vera Noest

> MCSE, CCEA, Microsoft MVP - Terminal Server

> TS troubleshooting: http://ts.veranoest.net

> ___ please respond in newsgroup, NOT by private email ___

>

> =?Utf-8?B?UmljdXM=?= <Ricus@discussions.microsoft.com> wrote on 06

> maj 2008 in microsoft.public.windows.terminal_services:

>

> > I have setup a TS server

> >

> > Spec: 2.33GHZ quad core xeon

> > 8GB Memory

> > 80GB RAID Mirror

> > Win2k3R2 X64 (For +/- 10 Users running a Client server

> > Accounting package and Outlook.)

> >

> > I have setup the TS profile paths and installed the software on

> > the server using the TS help wizard.

> > Relaxed TS permissions etc.

> >

> > Disabled caching of offline files etc.

> >

> > We do not use roaming profiles.(Hope this is a spur to get there

> > acctually)

> >

> > However I have a few issues.

> >

> > MAJOR issue first

> >

> > If I log in on the server as admin and use the accounting

> > package (ACCPAC setup as client server with local install

> > pointing to a network server serving the clients from a file

> > share.) I can use it just fine through TS and it works perfectly

> > as ADMINISTRATOR.

> >

> > However even after making one of the users that will use the

> > server a local admin;adding the users to the terminal servers

> > local group etc.

> >

> > I get a file permission/general permission error if I try and

> > access the accounting package as any of the users.

> >

> > What I don't understand is if I run the package from a normal

> > workstation as the user it works perfectly with no errors. (The

> > users are all part of a group that has full access to the client

> > files for the accounting package on a network share).

> >

> >

> > The moment I run it from TS as one of the users I get the

> > permissions error.

> >

> > Less MAJOR issues I would like sorted

> >

> > I need the temp profiles to be removed or kept small on user

> > exit ;I would like to have folder redirection enabled.

> >

> > I would appreciate any and all help I am not very strong with

> > TS.

>

[Guest Ricus]

Re: TS user Permission issue to network from TS server.

 

I have gona and disabled internet explorer enhanced security settings. This

resolved the problem. I would like to keep security as high though as

possible any suggestions?

 

Also have you got any info for me on my less major issues I listed?

 

"Ricus" wrote:

> Thanks for the HELP i tried what is discribed in you links and no joy.

> I keep getting the same error exactly for accessing all network files.

>

> "Windows cannot access the specified device,path,or file. You may not have

> the appropriate permissions to access the item"

>

> Process monitor has no "ACCESS denied" messages but allot of "name not

> found".

>

> What else can I try.

>

> "Vera Noest [MVP]" wrote:

>

> > Check if these help:

> >

> > My application runs only for the Administrator who installed the

> > application, but not for normal users or other accounts with

> > Administrator rights

> > http://ts.veranoest.net/ts_faq_applications.htm#install_runonce

> >

> > My application runs fine for Administrators, but not for normal

> > users

> > http://ts.veranoest.net/ts_faq_applications.htm#FileRegMon

> >

> > _________________________________________________________

> > Vera Noest

> > MCSE, CCEA, Microsoft MVP - Terminal Server

> > TS troubleshooting: http://ts.veranoest.net

> > ___ please respond in newsgroup, NOT by private email ___

> >

> > =?Utf-8?B?UmljdXM=?= <Ricus@discussions.microsoft.com> wrote on 06

> > maj 2008 in microsoft.public.windows.terminal_services:

> >

> > > I have setup a TS server

> > >

> > > Spec: 2.33GHZ quad core xeon

> > > 8GB Memory

> > > 80GB RAID Mirror

> > > Win2k3R2 X64 (For +/- 10 Users running a Client server

> > > Accounting package and Outlook.)

> > >

> > > I have setup the TS profile paths and installed the software on

> > > the server using the TS help wizard.

> > > Relaxed TS permissions etc.

> > >

> > > Disabled caching of offline files etc.

> > >

> > > We do not use roaming profiles.(Hope this is a spur to get there

> > > acctually)

> > >

> > > However I have a few issues.

> > >

> > > MAJOR issue first

> > >

> > > If I log in on the server as admin and use the accounting

> > > package (ACCPAC setup as client server with local install

> > > pointing to a network server serving the clients from a file

> > > share.) I can use it just fine through TS and it works perfectly

> > > as ADMINISTRATOR.

> > >

> > > However even after making one of the users that will use the

> > > server a local admin;adding the users to the terminal servers

> > > local group etc.

> > >

> > > I get a file permission/general permission error if I try and

> > > access the accounting package as any of the users.

> > >

> > > What I don't understand is if I run the package from a normal

> > > workstation as the user it works perfectly with no errors. (The

> > > users are all part of a group that has full access to the client

> > > files for the accounting package on a network share).

> > >

> > >

> > > The moment I run it from TS as one of the users I get the

> > > permissions error.

> > >

> > > Less MAJOR issues I would like sorted

> > >

> > > I need the temp profiles to be removed or kept small on user

> > > exit ;I would like to have folder redirection enabled.

> > >

> > > I would appreciate any and all help I am not very strong with

> > > TS.

> >

[Guest Vera Noest [MVP]]

Re: TS user Permission issue to network from TS server.

 

Aaah, that's another FAQ :-)

 

When users start a program, they get a "file download" dialog box,

or an error message: "Windows cannot access the specified device,

path, or file. You may not have the appropriate permissions to

access the item."

http://ts.veranoest.net/ts_faq_user_issues.htm#IEESconfig

 

Folder redirection and deletion of the cached roaming profile can

both be configured through a Group Policy. You'll find the settings

here:

 

Computer Configuration - Administrative Templates - System - User

profiles

"Delete cached copies of roaming profiles"

 

User Configuration - Windows Settings - Folder Redirection

Application Data

Desktop

My Documents

Start Menu

 

And since the Folder redirection settings are User Configuration

settings, you will also need to use loopback processing of the GPO:

 

Computer Configuration - Administrative Templates - System - Group

Policy

"User Group Policy loopback processing mode" - "Replace"

_________________________________________________________

Vera Noest

MCSE, CCEA, Microsoft MVP - Terminal Server

TS troubleshooting: http://ts.veranoest.net

___ please respond in newsgroup, NOT by private email ___

 

=?Utf-8?B?UmljdXM=?= <Ricus@discussions.microsoft.com> wrote on 12

maj 2008 in microsoft.public.windows.terminal_services:

> I have gona and disabled internet explorer enhanced security

> settings. This resolved the problem. I would like to keep

> security as high though as possible any suggestions?

>

> Also have you got any info for me on my less major issues I

> listed?

>

> "Ricus" wrote:

>

>> Thanks for the HELP i tried what is discribed in you links and

>> no joy. I keep getting the same error exactly for accessing all

>> network files.

>>

>> "Windows cannot access the specified device,path,or file. You

>> may not have the appropriate permissions to access the item"

>>

>> Process monitor has no "ACCESS denied" messages but allot of

>> "name not found".

>>

>> What else can I try.

>>

>> "Vera Noest [MVP]" wrote:

>>

>> > Check if these help:

>> >

>> > My application runs only for the Administrator who installed

>> > the application, but not for normal users or other accounts

>> > with Administrator rights

>> > http://ts.veranoest.net/ts_faq_applications.htm#install_runonc

>> > e

>> >

>> > My application runs fine for Administrators, but not for

>> > normal users

>> > http://ts.veranoest.net/ts_faq_applications.htm#FileRegMon

>> >

>> > _________________________________________________________

>> > Vera Noest

>> > MCSE, CCEA, Microsoft MVP - Terminal Server

>> > TS troubleshooting: http://ts.veranoest.net

>> > ___ please respond in newsgroup, NOT by private email ___

>> >

>> > =?Utf-8?B?UmljdXM=?= <Ricus@discussions.microsoft.com> wrote

>> > on 06 maj 2008 in microsoft.public.windows.terminal_services:

>> >

>> > > I have setup a TS server

>> > >

>> > > Spec: 2.33GHZ quad core xeon

>> > > 8GB Memory

>> > > 80GB RAID Mirror

>> > > Win2k3R2 X64 (For +/- 10 Users running a Client server

>> > > Accounting package and Outlook.)

>> > >

>> > > I have setup the TS profile paths and installed the

>> > > software on the server using the TS help wizard.

>> > > Relaxed TS permissions etc.

>> > >

>> > > Disabled caching of offline files etc.

>> > >

>> > > We do not use roaming profiles.(Hope this is a spur to get

>> > > there acctually)

>> > >

>> > > However I have a few issues.

>> > >

>> > > MAJOR issue first

>> > >

>> > > If I log in on the server as admin and use the accounting

>> > > package (ACCPAC setup as client server with local install

>> > > pointing to a network server serving the clients from a

>> > > file share.) I can use it just fine through TS and it works

>> > > perfectly as ADMINISTRATOR.

>> > >

>> > > However even after making one of the users that will use

>> > > the server a local admin;adding the users to the terminal

>> > > servers local group etc.

>> > >

>> > > I get a file permission/general permission error if I try

>> > > and access the accounting package as any of the users.

>> > >

>> > > What I don't understand is if I run the package from a

>> > > normal workstation as the user it works perfectly with no

>> > > errors. (The users are all part of a group that has full

>> > > access to the client files for the accounting package on a

>> > > network share).

>> > >

>> > >

>> > > The moment I run it from TS as one of the users I get the

>> > > permissions error.

>> > >

>> > > Less MAJOR issues I would like sorted

>> > >

>> > > I need the temp profiles to be removed or kept small on

>> > > user exit ;I would like to have folder redirection enabled.

>> > >

>> > > I would appreciate any and all help I am not very strong

>> > > with TS.