TS user Permission issue to network from TS server.

  • Thread starter Thread starter Ricus
  • Start date Start date
R

Ricus

Guest
I have setup a TS server

Spec: 2.33GHZ quad core xeon
8GB Memory
80GB RAID Mirror
Win2k3R2 X64 (For +/- 10 Users running a Client server Accounting package
and Outlook.)

I have setup the TS profile paths and installed the software on the server
using the TS help wizard.
Relaxed TS permissions etc.

Disabled caching of offline files etc.

We do not use roaming profiles.(Hope this is a spur to get there acctually)

However I have a few issues.

MAJOR issue first

If I log in on the server as admin and use the accounting package (ACCPAC
setup as client server with local install pointing to a network server
serving the clients from a file share.) I can use it just fine through TS and
it works perfectly as ADMINISTRATOR.

However even after making one of the users that will use the server a local
admin;adding the users to the terminal servers local group etc.

I get a file permission/general permission error if I try and access the
accounting package as any of the users.

What I don't understand is if I run the package from a normal workstation as
the user it works perfectly with no errors. (The users are all part of a
group that has full access to the client files for the accounting package on
a network share).


The moment I run it from TS as one of the users I get the permissions error.

Less MAJOR issues I would like sorted

I need the temp profiles to be removed or kept small on user exit ;I would
like to have folder redirection enabled.

I would appreciate any and all help I am not very strong with TS.
 
Re: TS user Permission issue to network from TS server.

Check if these help:

My application runs only for the Administrator who installed the
application, but not for normal users or other accounts with
Administrator rights
http://ts.veranoest.net/ts_faq_applications.htm#install_runonce

My application runs fine for Administrators, but not for normal
users
http://ts.veranoest.net/ts_faq_applications.htm#FileRegMon

_________________________________________________________
Vera Noest
MCSE, CCEA, Microsoft MVP - Terminal Server
TS troubleshooting: http://ts.veranoest.net
___ please respond in newsgroup, NOT by private email ___

=?Utf-8?B?UmljdXM=?= <Ricus@discussions.microsoft.com> wrote on 06
maj 2008 in microsoft.public.windows.terminal_services:

> I have setup a TS server
>
> Spec: 2.33GHZ quad core xeon
> 8GB Memory
> 80GB RAID Mirror
> Win2k3R2 X64 (For +/- 10 Users running a Client server
> Accounting package and Outlook.)
>
> I have setup the TS profile paths and installed the software on
> the server using the TS help wizard.
> Relaxed TS permissions etc.
>
> Disabled caching of offline files etc.
>
> We do not use roaming profiles.(Hope this is a spur to get there
> acctually)
>
> However I have a few issues.
>
> MAJOR issue first
>
> If I log in on the server as admin and use the accounting
> package (ACCPAC setup as client server with local install
> pointing to a network server serving the clients from a file
> share.) I can use it just fine through TS and it works perfectly
> as ADMINISTRATOR.
>
> However even after making one of the users that will use the
> server a local admin;adding the users to the terminal servers
> local group etc.
>
> I get a file permission/general permission error if I try and
> access the accounting package as any of the users.
>
> What I don't understand is if I run the package from a normal
> workstation as the user it works perfectly with no errors. (The
> users are all part of a group that has full access to the client
> files for the accounting package on a network share).
>
>
> The moment I run it from TS as one of the users I get the
> permissions error.
>
> Less MAJOR issues I would like sorted
>
> I need the temp profiles to be removed or kept small on user
> exit ;I would like to have folder redirection enabled.
>
> I would appreciate any and all help I am not very strong with
> TS.
 
Re: TS user Permission issue to network from TS server.

Thanks for the HELP i tried what is discribed in you links and no joy.
I keep getting the same error exactly for accessing all network files.

"Windows cannot access the specified device,path,or file. You may not have
the appropriate permissions to access the item"

Process monitor has no "ACCESS denied" messages but allot of "name not
found".

What else can I try.

"Vera Noest [MVP]" wrote:

> Check if these help:
>
> My application runs only for the Administrator who installed the
> application, but not for normal users or other accounts with
> Administrator rights
> http://ts.veranoest.net/ts_faq_applications.htm#install_runonce
>
> My application runs fine for Administrators, but not for normal
> users
> http://ts.veranoest.net/ts_faq_applications.htm#FileRegMon
>
> _________________________________________________________
> Vera Noest
> MCSE, CCEA, Microsoft MVP - Terminal Server
> TS troubleshooting: http://ts.veranoest.net
> ___ please respond in newsgroup, NOT by private email ___
>
> =?Utf-8?B?UmljdXM=?= <Ricus@discussions.microsoft.com> wrote on 06
> maj 2008 in microsoft.public.windows.terminal_services:
>
> > I have setup a TS server
> >
> > Spec: 2.33GHZ quad core xeon
> > 8GB Memory
> > 80GB RAID Mirror
> > Win2k3R2 X64 (For +/- 10 Users running a Client server
> > Accounting package and Outlook.)
> >
> > I have setup the TS profile paths and installed the software on
> > the server using the TS help wizard.
> > Relaxed TS permissions etc.
> >
> > Disabled caching of offline files etc.
> >
> > We do not use roaming profiles.(Hope this is a spur to get there
> > acctually)
> >
> > However I have a few issues.
> >
> > MAJOR issue first
> >
> > If I log in on the server as admin and use the accounting
> > package (ACCPAC setup as client server with local install
> > pointing to a network server serving the clients from a file
> > share.) I can use it just fine through TS and it works perfectly
> > as ADMINISTRATOR.
> >
> > However even after making one of the users that will use the
> > server a local admin;adding the users to the terminal servers
> > local group etc.
> >
> > I get a file permission/general permission error if I try and
> > access the accounting package as any of the users.
> >
> > What I don't understand is if I run the package from a normal
> > workstation as the user it works perfectly with no errors. (The
> > users are all part of a group that has full access to the client
> > files for the accounting package on a network share).
> >
> >
> > The moment I run it from TS as one of the users I get the
> > permissions error.
> >
> > Less MAJOR issues I would like sorted
> >
> > I need the temp profiles to be removed or kept small on user
> > exit ;I would like to have folder redirection enabled.
> >
> > I would appreciate any and all help I am not very strong with
> > TS.
>
 
Re: TS user Permission issue to network from TS server.

I have gona and disabled internet explorer enhanced security settings. This
resolved the problem. I would like to keep security as high though as
possible any suggestions?

Also have you got any info for me on my less major issues I listed?

"Ricus" wrote:

> Thanks for the HELP i tried what is discribed in you links and no joy.
> I keep getting the same error exactly for accessing all network files.
>
> "Windows cannot access the specified device,path,or file. You may not have
> the appropriate permissions to access the item"
>
> Process monitor has no "ACCESS denied" messages but allot of "name not
> found".
>
> What else can I try.
>
> "Vera Noest [MVP]" wrote:
>
> > Check if these help:
> >
> > My application runs only for the Administrator who installed the
> > application, but not for normal users or other accounts with
> > Administrator rights
> > http://ts.veranoest.net/ts_faq_applications.htm#install_runonce
> >
> > My application runs fine for Administrators, but not for normal
> > users
> > http://ts.veranoest.net/ts_faq_applications.htm#FileRegMon
> >
> > _________________________________________________________
> > Vera Noest
> > MCSE, CCEA, Microsoft MVP - Terminal Server
> > TS troubleshooting: http://ts.veranoest.net
> > ___ please respond in newsgroup, NOT by private email ___
> >
> > =?Utf-8?B?UmljdXM=?= <Ricus@discussions.microsoft.com> wrote on 06
> > maj 2008 in microsoft.public.windows.terminal_services:
> >
> > > I have setup a TS server
> > >
> > > Spec: 2.33GHZ quad core xeon
> > > 8GB Memory
> > > 80GB RAID Mirror
> > > Win2k3R2 X64 (For +/- 10 Users running a Client server
> > > Accounting package and Outlook.)
> > >
> > > I have setup the TS profile paths and installed the software on
> > > the server using the TS help wizard.
> > > Relaxed TS permissions etc.
> > >
> > > Disabled caching of offline files etc.
> > >
> > > We do not use roaming profiles.(Hope this is a spur to get there
> > > acctually)
> > >
> > > However I have a few issues.
> > >
> > > MAJOR issue first
> > >
> > > If I log in on the server as admin and use the accounting
> > > package (ACCPAC setup as client server with local install
> > > pointing to a network server serving the clients from a file
> > > share.) I can use it just fine through TS and it works perfectly
> > > as ADMINISTRATOR.
> > >
> > > However even after making one of the users that will use the
> > > server a local admin;adding the users to the terminal servers
> > > local group etc.
> > >
> > > I get a file permission/general permission error if I try and
> > > access the accounting package as any of the users.
> > >
> > > What I don't understand is if I run the package from a normal
> > > workstation as the user it works perfectly with no errors. (The
> > > users are all part of a group that has full access to the client
> > > files for the accounting package on a network share).
> > >
> > >
> > > The moment I run it from TS as one of the users I get the
> > > permissions error.
> > >
> > > Less MAJOR issues I would like sorted
> > >
> > > I need the temp profiles to be removed or kept small on user
> > > exit ;I would like to have folder redirection enabled.
> > >
> > > I would appreciate any and all help I am not very strong with
> > > TS.
> >
 
Re: TS user Permission issue to network from TS server.

Aaah, that's another FAQ :-)

When users start a program, they get a "file download" dialog box,
or an error message: "Windows cannot access the specified device,
path, or file. You may not have the appropriate permissions to
access the item."
http://ts.veranoest.net/ts_faq_user_issues.htm#IEESconfig

Folder redirection and deletion of the cached roaming profile can
both be configured through a Group Policy. You'll find the settings
here:

Computer Configuration - Administrative Templates - System - User
profiles
"Delete cached copies of roaming profiles"

User Configuration - Windows Settings - Folder Redirection
Application Data
Desktop
My Documents
Start Menu

And since the Folder redirection settings are User Configuration
settings, you will also need to use loopback processing of the GPO:

Computer Configuration - Administrative Templates - System - Group
Policy
"User Group Policy loopback processing mode" - "Replace"
_________________________________________________________
Vera Noest
MCSE, CCEA, Microsoft MVP - Terminal Server
TS troubleshooting: http://ts.veranoest.net
___ please respond in newsgroup, NOT by private email ___

=?Utf-8?B?UmljdXM=?= <Ricus@discussions.microsoft.com> wrote on 12
maj 2008 in microsoft.public.windows.terminal_services:

> I have gona and disabled internet explorer enhanced security
> settings. This resolved the problem. I would like to keep
> security as high though as possible any suggestions?
>
> Also have you got any info for me on my less major issues I
> listed?
>
> "Ricus" wrote:
>
>> Thanks for the HELP i tried what is discribed in you links and
>> no joy. I keep getting the same error exactly for accessing all
>> network files.
>>
>> "Windows cannot access the specified device,path,or file. You
>> may not have the appropriate permissions to access the item"
>>
>> Process monitor has no "ACCESS denied" messages but allot of
>> "name not found".
>>
>> What else can I try.
>>
>> "Vera Noest [MVP]" wrote:
>>
>> > Check if these help:
>> >
>> > My application runs only for the Administrator who installed
>> > the application, but not for normal users or other accounts
>> > with Administrator rights
>> > http://ts.veranoest.net/ts_faq_applications.htm#install_runonc
>> > e
>> >
>> > My application runs fine for Administrators, but not for
>> > normal users
>> > http://ts.veranoest.net/ts_faq_applications.htm#FileRegMon
>> >
>> > _________________________________________________________
>> > Vera Noest
>> > MCSE, CCEA, Microsoft MVP - Terminal Server
>> > TS troubleshooting: http://ts.veranoest.net
>> > ___ please respond in newsgroup, NOT by private email ___
>> >
>> > =?Utf-8?B?UmljdXM=?= <Ricus@discussions.microsoft.com> wrote
>> > on 06 maj 2008 in microsoft.public.windows.terminal_services:
>> >
>> > > I have setup a TS server
>> > >
>> > > Spec: 2.33GHZ quad core xeon
>> > > 8GB Memory
>> > > 80GB RAID Mirror
>> > > Win2k3R2 X64 (For +/- 10 Users running a Client server
>> > > Accounting package and Outlook.)
>> > >
>> > > I have setup the TS profile paths and installed the
>> > > software on the server using the TS help wizard.
>> > > Relaxed TS permissions etc.
>> > >
>> > > Disabled caching of offline files etc.
>> > >
>> > > We do not use roaming profiles.(Hope this is a spur to get
>> > > there acctually)
>> > >
>> > > However I have a few issues.
>> > >
>> > > MAJOR issue first
>> > >
>> > > If I log in on the server as admin and use the accounting
>> > > package (ACCPAC setup as client server with local install
>> > > pointing to a network server serving the clients from a
>> > > file share.) I can use it just fine through TS and it works
>> > > perfectly as ADMINISTRATOR.
>> > >
>> > > However even after making one of the users that will use
>> > > the server a local admin;adding the users to the terminal
>> > > servers local group etc.
>> > >
>> > > I get a file permission/general permission error if I try
>> > > and access the accounting package as any of the users.
>> > >
>> > > What I don't understand is if I run the package from a
>> > > normal workstation as the user it works perfectly with no
>> > > errors. (The users are all part of a group that has full
>> > > access to the client files for the accounting package on a
>> > > network share).
>> > >
>> > >
>> > > The moment I run it from TS as one of the users I get the
>> > > permissions error.
>> > >
>> > > Less MAJOR issues I would like sorted
>> > >
>> > > I need the temp profiles to be removed or kept small on
>> > > user exit ;I would like to have folder redirection enabled.
>> > >
>> > > I would appreciate any and all help I am not very strong
>> > > with TS.
 
Back
Top