SoftTree Technologies SoftTree Technologies
Technical Support Forums
RegisterSearchFAQMemberlistUsergroupsLog in
RunAsUser

 
Reply to topic    SoftTree Technologies Forum Index » 24x7 Scheduler, Event Server, Automation Suite View previous topic
View next topic
RunAsUser
Author Message
SC



Joined: 04 Oct 2005
Posts: 6

Post RunAsUser Reply with quote

Hello,

I have some problem with RunAsUser command.
I modify User rights, as are defined in your documentation.

==> 24x7 User has Trusted Computer Base and File Change Notify
privilege.
This user is on Domain User group

==> User for RunAsUser, has LOG ON AS A BATCH JOB in local strategy.

I have this message :
Create process Failed - 1314 ...

Any idea ?

Thu Oct 20, 2005 1:18 pm View user's profile Send private message
SysOp
Site Admin


Joined: 26 Nov 2006
Posts: 7966

Post Re: RunAsUser Reply with quote

Please provide the complete error message

: Hello,

: I have some problem with RunAsUser command.
: I modify User rights, as are defined in your documentation.

: ==> 24x7 User has Trusted Computer Base and File Change Notify
: privilege.
: This user is on Domain User group

: ==> User for RunAsUser, has LOG ON AS A BATCH JOB in local strategy.

: I have this message : Create process Failed - 1314 ...

: Any idea ?

Thu Oct 20, 2005 1:22 pm View user's profile Send private message
SC



Joined: 04 Oct 2005
Posts: 6

Post Re: RunAsUser Reply with quote

: Please provide the complete error message

Create process failed. Return
: code:1314 - A required privilege is not held by the client.

Thank you,

Thu Oct 20, 2005 2:45 pm View user's profile Send private message
SysOp
Site Admin


Joined: 26 Nov 2006
Posts: 7966

Post Re: RunAsUser Reply with quote

Check 2 things:
1. If you don't have a local user with the same name your domain settings override your local settings so that locally granted "logon as" has n eefect if the domain account doesn't have it
2. If you run it as a service, you will also need to gran "log on as a service" permission.

And finaly, these settings are cached. After making changes make sure to restart the computer or at least do a logoff/logon try.

: Create process failed. Return

: Thank you,

Thu Oct 20, 2005 3:13 pm View user's profile Send private message
SC



Joined: 04 Oct 2005
Posts: 6

Post Re: RunAsUser Reply with quote

: Check 2 things: 1. If you don't have a local user with the same name your
: domain settings override your local settings so that locally granted
: "logon as" has n eefect if the domain account doesn't have it
: 2. If you run it as a service, you will also need to gran "log on as a
: service" permission.

: And finaly, these settings are cached. After making changes make sure to
: restart the computer or at least do a logoff/logon try.

SE_BATCH_LOGON_NAME privilege = LOGON32_LOGON_BATCH ?

Thu Oct 20, 2005 6:28 pm View user's profile Send private message
SysOp
Site Admin


Joined: 26 Nov 2006
Posts: 7966

Post Re: RunAsUser Reply with quote

I am ot sure what LOGON32_LOGON_BATCH is. Where did you get it?

: SE_BATCH_LOGON_NAME privilege = LOGON32_LOGON_BATCH ?

Thu Oct 20, 2005 7:13 pm View user's profile Send private message
SC



Joined: 04 Oct 2005
Posts: 6

Post Re: RunAsUser Reply with quote

: I am ot sure what LOGON32_LOGON_BATCH is. Where did you get it?

In 24x7's documentation :
"The user account specified in
the Run As Another User properties must
have the necessary LOG ON AS A BATCH JOB privilege
(LOGON32_LOGON_BATCH).
This user right is defined in the
Default Domain Controller Group Policy object (GPO)
and in the local security policy of workstations
and servers. By default, only the LocalSystem
account has the privilege to be logged on as
a batch job."


Fri Oct 21, 2005 4:25 am View user's profile Send private message
SysOp
Site Admin


Joined: 26 Nov 2006
Posts: 7966

Post Re: RunAsUser Reply with quote

Yes, I guess this is the same thing, LOGON32_LOGON_BATCH appears to be an old name used in WinNT 3.51 and 4.0

: In 24x7's documentation : "The user account specified in
: the Run As Another User properties must
: have the necessary LOG ON AS A BATCH JOB privilege
: (LOGON32_LOGON_BATCH).
: This user right is defined in the
: Default Domain Controller Group Policy object (GPO)
: and in the local security policy of workstations
: and servers. By default, only the LocalSystem
: account has the privilege to be logged on as
: a batch job."

Fri Oct 21, 2005 8:38 am View user's profile Send private message
Display posts from previous:    
Reply to topic    SoftTree Technologies Forum Index » 24x7 Scheduler, Event Server, Automation Suite All times are GMT - 4 Hours
Page 1 of 1

 
Jump to: 
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum


 

 

Powered by phpBB © 2001, 2005 phpBB Group
Design by Freestyle XL / Flowers Online.