why can' a domain user launch an app from terminal session?

[Simon Xia]

windows 2000 domain member server, terminal server in app mode, locally
installed app (.net windows form, in house developed)

a domain user can log on locally and run the program without problem. but if
she log on through terminal server session, she won't be able to launch the
app and get a access denied error from CLR.

also if i put the user into local admin group, she'll be able to launch it
in terminal session.

what could be changed to allow users from running this program from terminal
server just as regular user?

thanks a lot.

Simon

 

[Vera Noest [MVP]]

As with all permission related problems, I would download FileMon
and RegMon from http://www.sysinternals.com/. Run them as
administrator, start a TS session as a normal user and try to run
the application.

FileMon and RegMon will show you all "access denied" errors
that occur, so that you can give your users the necessary
permissions on a file-to file or Registry subkey basis.

 

[Simon Xia]

besides file and registry, what else could be monitored? i didn't see
"access denied" message. any other access rights needed?

thanks a lot.

Simon

 

[Vera Noest [MVP]]

No, I wouldn't know of anything else, besides user rights like
"log on locally", but a lack of such rights would affect the
ability to start a rdp session itself, not running a single
application.

Since the application is developed inhouse, your best option seems
to talk with the developers. They should know what rights and
permissions are needed.

 

[Simon Xia]

problem is, I'm the developer of the program.

what i did in the program was to use windows api (unmanaged code) to send
some key combinations to another legacy windows program (not in house) and
auto copy some field values and paste into my program. two dlls i loaded
were user32.dll and kernal32.dll (for sending keys and defining hot keys).

i used vb.net 2002 to do this.

Now on the target machine, the very first form screen won't show before i
got the clr error (access denied).

the user rights must be related to those APIs i called in the program. i
just don't want to gave them too many rights to screw my server.

thanks.

Simon

 

[Vera Noest [MVP]]

I think you'd better post this in a developer newsgroup, Simon.

--
Vera Noest
MCSE, CCEA, Microsoft MVP - Terminal Server
http://hem.fyristorg.com/vera/IT
--- please respond in newsgroup, NOT by private email ---