Allow service to interact with desktop

Hi,
DC OS - Windows Server 2008 R2 Std
Client OS - Windows XP, Windows 7
I have implemented Security policy through Network Policy Server and enabled Wired AutoConfig Services Automatically. While Enabling Wired AutoConfig Services, if i check mark on ' Allow service to interact with Desktop ' It works proper in some of Window7
Laptop.
But on internet it is giving me Warning that "Interactive services can display a user interface and receive user input. If you allow the service to interact with the desktop, any information that the service displays on the desktop will also be displayed
on an interactive user's desktop. A malicious user could then take control of the service or attack it from the interactive desktop."
Can you give me some example how Malicious User can take control of the service or attack it from the interactive desktop?
Thanks & Regards,
Param
www.paramgupta.blogspot.com

Hi,
By default, services use a noninteractive window station and cannot interact with the user. However, an interactive service can display a user interface and receive user input. Once LocalSystem account (a services running in an elevated security context)
creates a window on the interactive desktop, any other application that is running on the interactive desktop can interact with this window. That is, this exposes the service to any application that a logged-on user executes.
Then it will be very dangerous.
Andy Altmann
TechNet Community Support

Similar Messages

  • Enterprise Services - Architecture - Interaction with ECC

    Can someone please link to architectural docuementation for Enterprise Services which explains how NW PI interacts with ECC?

    Hi Jesse,
    > I've already searched and not found what I was looking for
    Which means you haven't used proper keywords. PI and ECC integration (using proxy, RFC, Idoc etc) is well documented and I am surprized to know that you weren't able to find it.
    >So you should assume that the poster has already searched.
    Nope. This is very common for people to do "Crowd-sourcing" and "do-my-job" and post question without searching (or rather lazy search) and that's why moderators are there
    Let me give you few keywords for search.
    ECC Proxy PI  = Proxy connection between PI and ECC (provider as well consumer)
    ABAP Proxy PI = same as above
    SWF_BAM  = Business Event triggering outbound services
    Still you won't be able to find then read following:
    http://www.sdn.sap.com/irj/scn/index?rid=/library/uuid/c0e7ae66-be6d-2a10-d385-92e6e67dee10
    http://www.sdn.sap.com/irj/scn/index?rid=/library/uuid/50d69314-1be0-2b10-11ab-8045021f0c3a
    >If you have links, please do share, but please do not again reply to anyone's post with, "Go search."
    Sorry if you are looking for spoon-feeding then you are asking at wrong place. I can only help you with some basics and then you need to figure things out by yourself and "one-liner" question won't help either.
    Regards,
    Gourav

  • Is there a VI availible that will allow one to interact with an analog signal

    Hello all,
     I am new to the sight and look forward to participating. I have a project that I’m working on and I would like to ask for your thoughts and direction if you’re willing. I have a few weeks left before completing an electronics program degree and Labview is one of the classes. The project I have chosen is to illustrate the differences between a micro controlled system and Labview controlled environment. I will be  acquiring a signal through a ultra sonic distance sensor. The analog signal will be produced after which  acquired  through a SCB – 68 connector block and converted using the pci-mio-16E. The sensor operates at 40 kHz emitting a 5v pulse (burst) then falling to gnd for a short period followed by a 5v rise and staying high for a period of time waiting for the return of the frequency. This time period represents 3 inches to 27 ft in distance.  I would like to interact with this signal through the distance period (portion) and output a string displaying a numeric value of the distance on the front panel obtained from an array built from different periods of the signal.  I am not clear on what Labview function offers this type of control.  I am hopeful in utilizing a vi or some type of trigger that allows me to build an array produced by some math functions.  Any help would be appreciated.
    Thank you, dhitch

    First thank you for your response, I will have an opportunity to make a capture tomorrow in class.  I believe I have run across the waveform measurement VI in my searches and am sure it’s a very good choice. The trigger VI you suggest, going by the name, should be my ticket. Would you imagine a delay or decreasing time after the capture, allowing the trigger VI time to respond to an output configuration be required?
    If I remember correctly the sampling rate capabilities are 500K samples/ second with 12 bits of resolution and as I say that it seems some of the capabilities rely on the processing speed of the computer. I guess I will kick the tires tomorrow hey.  There are 2 class periods remaining to finish our projects @ 2 hrs / class and my anxiety is a bit high. Wish me luck and thank you so much.
    dhitch

  • Locked mouse interaction with desktop

    Hello all,
    The following issue has just started reoccuring for me. The fault state is what occurs if you left click and drag on the desktop - you get the shaded rectangle.
    I can be happily using my Mac and all of a sudden the mouse will be locked in this 'rectangle' state. I cannot unlock it from this state. It has occured with two different USB mice and with my current BT Mighty mouse. The only way out of this is a restart.
    This error also can occur when I am away from the machine. I come back and find the mouse stuck in the rectangle drawing mode.
    I am going out of my mind with how to fix this? Has anyone got any ideas?
    Thanks
    Anthony
    G4PB 12" 1.5   Mac OS X (10.4.8)  

    So, the best intermediate solution I've found is to add a swath of MouseEvent listeners (CLICK, DOUBLE_CLICK, MOUSE_OVER, MOUSE_DOWN, MOUSE_UP) to the Sprite objects associated with my ContainerControllers.  These listeners just call event.preventDefault() and event.stopImmediatePropagation().
    The end effect is what I desired -- no more user-initiated mouse-based selection of the text.
    Still, this seems a bit awkward, especially if for some reason in the future I need mouse-based interaction with the host Sprites for reasons unrelated to the text flow.
    Anyone know a more targeted or centralized solution out there?

  • Web Map Services - Geoserver Interaction with Java

    I am working on a Java Applet, which makes use of a WMS (geoserver), which displays a specified map and then manipulates it to however is desired (zooming, panning etc). I mainly just want to know if anyone knows much about this and any techniques that can speed up the response time of the geoserver queries, so the applet is at a much more practical speed and better to use.
    An example of the problem is, that when the user clicks the zoom in button, it takes about 5 seconds for it to respond with the zoomed in map as it constructs the query, and then sends it off to geoserver which then responds with the newly constructed image. It is vital that the speed of the this is as fast as possible.
    Basically we just need faster response time.
    Any help would be fantastic.

    An example of the problem is, that when the user
    clicks the zoom in button, it takes about 5 seconds
    for it to respond with the zoomed in map as it
    constructs the query, and then sends it off to
    geoserver which then responds with the newly
    constructed image. It is vital that the speed of the
    this is as fast as possible.Well, first you need to have a look at the bottlenecks. I assume that constructing and sending the query isn't really one, so it's just the server. There might be a way to get more bandwidth or higher priority from the geoserver, but you would have to ask the service provider about that. Otherwise, do some profiling and come back here - there are few general recipes for "making things faster", if any; a detailed look is required.

  • Loaded FF on laptop (Win 8), why is there no way to interact with it?

    FF loaded onto my new laptop, using Windows , does not have a tool bar to allow me to interact with it. What can I do about this problem?

    Is it regular Windows 8, not RT?
    If you don't see any of the regular bars (e.g., tab bar, toolbar, bookmarks toolbar), your Firefox might be in full screen mode. The F11 function key switches between regular and full screen views.
    If you have a tab bar, you can right-click a blank area of it or click the new tab (+) button and enable missing toolbars from the menu that pops up.
    Any luck?

  • "Dreamweaver is currently interacting with the server.  Since putting a file on save requires interaction with a server as well  Dreamweaver can not currently perform this task.  Please try again when the server task is complete."

    get rid of this [abusive content removed by moderator]

    Wow this is a long running thread!
    I've discovered, since having to start using check in/check out on a site with multiple editors ('put on save' being a minor version of this), that Dreamweaver is like a nosy neighbour, more concerned with what is going on outside than with your petty demands. So Dreamweaver is constantly checking to see whether any files are in use by anybody else. When it is good and ready it will allow you to interact with the server. If your connection is anything other than rocket powered you will spend ages waiting and looking at messages such as the above. It doesn't have the sense to stop and just check the file/s you want to put or get and then let you get on with it. And of course the bigger the site, the more checking it has to do. If your connection is really slow you will have the added pleasure of constant freezes, aberrant behaviour and crashes. I have this with CS4. I don't know if CS5 is any better. And don't expect any improvement on CS4. You are stuck with it.

  • Allow log on through Remote Desktop Services Group Policy for Domain Controllers

    Hello,
    We want to allow our Helpdesk Operators to be able to connect to Domain Controllers with the Remote Desktop Services. This is by default not allowed but according to many sites, it should be able to configure by using a Group Policy.
    We made a new Group Policy with the setting 'Allow log on through Remote Desktop Services' and 'Allow log on locally' (as an extra for testing) and applied Security Filtering to only use it for a specific Security Group. Our test user is a member of this
    security group and should be able to access the Domain Controllers now. However this isn't working.
    The error message we receive upon trying to connect:
    The connection was denied because the user account is not authorized for remote login.
    For troubleshooting, we also applied the Security Group for that setting in the Default Domain Controllers Policy but that doesn't seem to work either. We want to avoid customization on our Default Domain Controllers Policy but this was just a test case
    for solving our problem.
    What should we do to solve our problem?
    I hope to hear from you soon.
    Thanks in advance.

    Hi, I just found out what the problem was. This site helped me alot:
    http://blogs.technet.com/b/askperf/archive/2011/09/09/allow-logon-through-terminal-services-group-policy-and-remote-desktop-users-group.aspx
    In my case, I had the group added to the Allow Logon Through Remote Desktop Services but was not added to the Builtin\Remote Desktop Users group. After knowing this I made some changes to our situation and are now using the builtin\Remote Desktop Users group
    rather than a new self made Security Group. I also added the Remote Desktop Users to the Allow Logon Through Remote Desktop Service in the Default Domain Controllers Policy as this is not done by default. By default only the Domain Administrators are able
    to logon through remote desktop services.
    You do not need the 'Log on Locally' permission within the Group Policies.
    In short:
    Add the desired users/groups to the 'Builtin\Remote Desktop Users' security group.
    Add the 'Builtin\Remote Desktop Users' security group to the 'Allow Logon Through Remote Desktop Services' within the 'Default Domain Controllers Policy'.
    Thank you anyway for the fast reply.
    Have a nice day!

  • Interactive Analysis Desktop in use with PostgreSQL DB and ODBC

    Hello, is it possible to use the Interactive Analysis Desktop with commercial databases? Specifically, PostgreSQL? But it would also be helpful to use with MySQL and MS SQL.
    If so, would it be possible to connect using ODBC or DSN? Please let me know.

    You need to use bind variables.
    Define a PHP variable for master key. Parse the following anonymous PL/SQL block:
    begin
      get_unique_master_key('DEMO','CMPL','SK','DWMT_TABLE', ? );
    end;Bind the PHP master key to the bind variable. Execute.
    Bind variables are input and/or output variables. In this case, you want to use it as an output variable in order to receive the master key value from the PL/SQL call.

  • Tool or framework to interact with OTM and Logistic Service Provider(LSP)

    Hi,
    We are using Oracle Transportation Management (OTM) service for the transportation management. But to interact with the LSP(logistic service provider) We need some tool.
    Please suggest me some tool or stable framework that can interact with OTM and Logistic Service Provider, just like Apache Camel
    if you have any any idea please guide me on this, it is very urgent .
    Edited by: 902943 on 13-Mar-2013 23:36

    @riatest Thanks for the info.
    I downloaded flex sdk to see if there is anything that will help me. But, In flex sdk, I cannot find anything that would ease my path. I want to stick to developing in C# to talk to Flash applications. What is the best way to proceed? Are there any sdks that I can download and use for C# development to interact with the flex controls? What is the way to go? I seem not to find any good hits in the web as well
    Thanks
    Sailesh

  • Automation engine is unable to playback the test because it is not able to interact with the desktop : Unsing VS2012 on Remote Desktop, Window not Minimized

    Hi
    I am running these tests using VS2012 on a remote desktop. The session is alive when I try to run it. The Window is not minimized.
    The tests run fine on my own machine. The VM has test agent and controller installed on it, but I am not using them right now to run the tests. Do you know what setting on my machine might casue this issue ?
    Stack trace:
    Test Outcome: Failed
    Test Duration: 0:00:00.6287248
    Result Message: Error calling Initialization method for test class <TestClassName> Microsoft.VisualStudio.TestTools.UITest.Extension.UITestException: Automation engine is unable to playback the test because it is not able to interact with the
    desktop.  This could happen if the computer running the test is locked or it’s remote session window is minimized.
    Result StackTrace: 
    at Microsoft.VisualStudio.TestTools.UITesting.UITestLogGenerator.ExceptionRecorder(Exception exception, Boolean rethrow)
       at Microsoft.VisualStudio.TestTools.UITesting.Playback.ThrowIfScreenLockedOrRemoteSessionMinimized()
       at Microsoft.VisualStudio.TestTools.UITesting.Playback.Initialize()
       at Microsoft.VisualStudio.TestTools.UITesting.CodedUITestExtensionExecution.BeforeTestInitialize(Object sender, BeforeTestInitializeEventArgs e)
       at Microsoft.VisualStudio.TestTools.TestTypes.Unit.UnitTestExecution.RaiseBeforeTestInitialize(BeforeTestInitializeEventArgs args)
       at Microsoft.VisualStudio.TestTools.TestTypes.Unit.UnitTestExecuter.RunInitializeMethod()

    Hello,
    Thank you for your post.
    “The VM has test agent and controller installed on it, but I am not using them right now to run the tests.”
    In this case, how do you run the Coded UI test on the VM? You start the Coded UI test from your own machine and then open the remote desktop session to make the test run on VM?
    If yes, I am afraid that you can’t do like that. You need to use the test controller and the agent in order to run the test on the remote desktop. Or you create the app and do coded UI test against it on the VM completely.
    If I have misunderstood anything, please feel free to let me know.
    Best regards,
    Amanda Zhu [MSFT]
    MSDN Community Support | Feedback to us
    Develop and promote your apps in Windows Store
    Please remember to mark the replies as answers if they help and unmark them if they provide no help.

  • Why do I have to Alt+Tab after startup to interact with my desktop?

    after I restart my machine, I always have to Alt+Tab to interact with all of my shortcuts on desktop and taskbar. I have run both avast antivirus and superantispyware programs, and both said there are no bugs... ???? whats going on????

    How does Firefox enter that problem?

  • Do you prefer to interact with Verizon through our Self Service tools or our centers?

    Our research shows that customers appreciate the flexibility and access that our self service tools provicde and as such they often prefer to interact with us through our various self service tools
    How about you? 

    It depends on the task at hand. For repairs or troubles I often times will use the call centers or other means of communicating to perform a task. Otherwise, actions such as monifying account settings I tend to do online. More convenient that way.
    ========
    The first to bring me 1Gbps Fiber for $30/m wins!

  • Terminal Services (TS) or Remote Desktop Services (RDS) scenario clarifications

    Dear Support,
    Question:
    Do I still need to purchase RDS CALS license? or can use MSDN CALs in the Terminal Server?
    Due to MSDN subscribers are End users, do not use Production Data and have to demo their developed applications to other End users group.
    Scenario:
    1. Use only Remote Desktop Session.
    2. End users are MSDN Subscribers.  (Although stated by Microsoft End users are non MSDN subscribers)
    3. End users demo applications to End users.
    4. End users develop their applications and have to demo to other End users group.
    From MSDN link:
    Client Access Licenses for Terminal Services
    With an MSDN subscription, you are allowed to provide end users access to Internet demonstrations of your programs via Terminal Services (Windows Server 2003 or Windows Server 2008) or Remote Desktop Services (Windows Server 2008 R2). Up to 200 anonymous
    users can simultaneously access your demonstration this way. Your demonstration must not use production data. MSDN subscribers are licensed to demonstrate their applications to end users,
    but Terminal Services (TS) or Remote Desktop Services (RDS) is the only scenario where end users without an MSDN subscription can interact with the demonstration application while the software is licensed through MSDN subscriptions.
    Accessing CALs            
    MSDN subscribers can access CALs for demonstration purposes through the
    Product keys page of MSDN Subscriber Downloads. Please access the documentation resources online for assistance with the
    Terminal Server activation process. If you have any questions, please visit the Microsoft
    Terminal Services forum.
    Mary Lee

    Hi
    Please call the licensing to be sure. In the USA (866) 230-0560 or
    [email protected]
    Regards, Philippe
    Don't forget to mark as answer or vote as helpful to help identify good information. ( linkedin endorsement never hurt too :o) )
    Answer an interesting question ? Create a
    wiki article about it!

  • How do I create an app to interact with my Web ? like skype or msn ?

    I need to create a downloadable interface like Skype or Msn which will interact with my website that is created on PHP and MySQL...
    What will be the best practices for this ? thanks in advance...

    You might take a look at Adobe's AIR platform which can use HTML, JavaScript, and Flash to develop applications that work on the desktop like a regular app but can also connect/interact with a web service. But that question is more in line with the Dreamweaver Application Development forum.

Maybe you are looking for