CSS runs at user log on with UAC, wants to restore keys, requires non-existant user as admin.

I am not sure exactly when this happened, but I am pretty sure it happened after the last system update that I accepted from Lenovo. Now, every time I log on to Vista (Ultimate, SP1) I get a UAC prompt, then when I accept, I end up with an OK dialog that says:
The Client Security system keys need to be restored. Only the Client Security administrator can perform this operation. The following user must log onto this computer to continue: Robert-PC\Robert.
Though I am "Robert", the X61T I am user has never had "Robert-PC" as a domain name or a computer name. That looks like some Windows Vista default that I changed a year and a half ago when I installed the OS.
I've tried running CSS (8.20.00023.00) and successfully removed all settings. I even told it to disable Password Recovery, Enhanced security, etc.. I even reset the TPM chip in the program and in BIOS. When I reenabled after many reboots, I still get this message every time I log on.
Any ideas how I can fix this annoyance? I just want to discard the keys and start over, but I cannot figure out how. I suspect even if I complete uninstall, the data will remain and show up again when I reinstall (though I haven't tried this, yet.)
Help!
Message Edited by sfwrtr on 02-08-2009 10:40 AM

I found a simple fix for this problem. I located Computer\user entry in the registry and changed it to the Domain\Administrator and logged off and then back on. It prompted me for my password and continued to update successfully. The registry key is "HKLM\SOFTWARE\Lenovo\TVT Common\Client Security Solution\AdminUser

Similar Messages

SHUTDOWNS WITH LEOPARD WANT TO RESTORE OLD SYSTEM

SINCE DOWNLOADING SNOW LEOPARD PROGRAMS CLOSE UNEXPECTEDLY. THE AMOUNT OF TIME A PROGRAM REMAINS OPEN VARIES GREATLY. THIS ALSO OCCURS WHEN I AM NOT RUNNING OTHER PROGRAMS IN THE BACKGROUND. I HAVE SENT A COMPLAINT IN ALMOST EVERY TIME (DOZENS).
I DO HAVE A COMPLETE BACKUP ON EXTERNAL HARD DRIVE PRIOR TO LOADING LEOPARD. IS THERE A WAY I CAN RESTORE TO THE GOOD OL DAYS BEFORE LEOPARD FROM MY PREVIOUS BACKUPS?

I USE TIME MACHINE TO AN EXTERNAL HARD DRIVE. I HAD A GENOUS BAR GUY TELL ME THAT IF I HAD MY HARD DRIVE BACKED UP WITH TIME MACHINE AND KNEW OF A SAVED DATE PRIOR TO INSTALLING SNOW LEOPARD THAT I COULD PROBABLY RESTORE MY COMPUTER BACK AND SHOULD RUN AS IT DID BEFORE.
HE ALSO SAID THAT "IF" THAT DOESN'T FIX THE PROBLEM THEN I WOULD HAVE TO REFORMAT THE HARD DRIVE AND THEN RELOAD EVERYTHING.
I'M PRETTY DISGUSTED AT THIS POINT

Logging on with IC ODBC 11.1.0.7.0 win-32

Hello,
I'm having trouble trying to connect to the 11.1.0.7.3 database with Oracle Instant Client 11.1.0.7.0 (Windows 32-bit). I have here Instant client basic, odbc and sqlplus.
- I'm able to log on the database with sqlplus.
- Logging on with Oracle ODBC driver is causing these error messages in the admin level client trace file:
(2160) [06-AUG-2010 10:56:44:291] nttcni: trying to connect to socket 1512.
(2160) [06-AUG-2010 10:57:05:304] ntt2err: entry
(2160) [06-AUG-2010 10:57:05:304] ntt2err: soc 1512 error - operation=1, ntresnt[0]=505, ntresnt[1]=60, ntresnt[2]=0
(2160) [06-AUG-2010 10:57:05:304] ntt2err: exit
(2160) [06-AUG-2010 10:57:05:413] nttcni: exit
(2160) [06-AUG-2010 10:57:05:413] nttcon: exit
(2160) [06-AUG-2010 10:57:05:413] nserror: nsres: id=0, op=65, ns=12535, ns2=12560; nt[0]=505, nt[1]=60, nt[2]=0; ora[0]=0, ora[1]=0, ora[2]=0
(2160) [06-AUG-2010 10:57:05:413] nsopen: unable to open transport
(2160) [06-AUG-2010 10:57:05:413] snsbitts_ts: acquired the bit
(2160) [06-AUG-2010 10:57:05:413] nsvntx_dei: entry
(2160) [06-AUG-2010 10:57:05:413] nsvntx_dei: exit
(2160) [06-AUG-2010 10:57:05:413] snsbitts_ts: acquired the bit
(2160) [06-AUG-2010 10:57:05:413] nsmfr: 2096 bytes at 0x94a2420
(2160) [06-AUG-2010 10:57:05:413] nsmfr: 996 bytes at 0x94a2030
(2160) [06-AUG-2010 10:57:05:413] nladget: entry
(2160) [06-AUG-2010 10:57:05:413] nladget: exit
(2160) [06-AUG-2010 10:57:05:413] nsmfr: 212 bytes at 0x948f8e8
(2160) [06-AUG-2010 10:57:05:413] nladtrm: entry
(2160) [06-AUG-2010 10:57:05:413] nladtrm: exit
(2160) [06-AUG-2010 10:57:05:413] nioqper: error from nscall
(2160) [06-AUG-2010 10:57:05:413] nioqper: ns main err code: 12535
(2160) [06-AUG-2010 10:57:05:413] nioqper: ns (2) err code: 12560
(2160) [06-AUG-2010 10:57:05:413] nioqper: nt main err code: 505
(2160) [06-AUG-2010 10:57:05:413] nioqper: nt (2) err code: 60
(2160) [06-AUG-2010 10:57:05:413] nioqper: nt OS err code: 0
(2160) [06-AUG-2010 10:57:05:413] niomapnserror: entry
(2160) [06-AUG-2010 10:57:05:413] niqme: entry
(2160) [06-AUG-2010 10:57:05:413] niqme: reporting NS-12535 error as ORA-12535
(2160) [06-AUG-2010 10:57:05:413] niqme: exit
(2160) [06-AUG-2010 10:57:05:413] niomapnserror: exit
(2160) [06-AUG-2010 10:57:05:413] niotns: Couldn't connect, returning 12170
(2160) [06-AUG-2010 10:57:05:413] nioqer: entry
(2160) [06-AUG-2010 10:57:05:413] nioqce: entry
(2160) [06-AUG-2010 10:57:05:413] nioqce: exit
(2160) [06-AUG-2010 10:57:05:413] nioqer: exit
(2160) [06-AUG-2010 10:57:05:413] niotns: exit
(2160) [06-AUG-2010 10:57:05:413] nsbrfr: nsbfs at 0x94a1e30, data at 0x94a2d90.
(2160) [06-AUG-2010 10:57:05:413] nigtrm: Count in the NI global area is now 1
(2160) [06-AUG-2010 10:57:05:413] nigtrm: Count in the NL global area is now 1
With Filemon one can see the correct sqora32.dll and tnsnames.ora are used. The directory of Instant Client 11.1.0.7.0 is in the beginning of the PATH.
The machine is very slow. There are high timeout values:
SQLNET.INBOUND_CONNECT_TIMEOUT = 300
SQLNET.INBOUND_CONNECT_TIMEOUT_[LISTENERNAME] = 300
SQLNET.SEND_TIMEOUT = 300
SQLNET.RECV_TIMEOUT = 300
The error message I get when trying to log on with the application (which has been used with Instant Client 10.1.0.5):
IM006: [Microsoft][ODBC Driver Manager] Driver's SQLSetConnectAttr failed
is the same which is thrown out when the tnsnames.ora or hosts file are not found.
The error message remains the same when the host ip is used instead of the host name in the tnsnames.ora file. The host ip can be seen in the trace file.
Comments will be much appreciated,

Looks like this is some thing to do with MS ODBC driver manager related.
couple of times I had faced similer issue, once my connection string was wrong and another time using user DSN instead of system DSN worked fine.
Also, check @ http://support.microsoft.com/kb/822841
Hope this helps!

How can I get Firefox to run on a network with multiple users logging on with the same user name and password?

I am trying to get Firefox running on a large network where I have multiple users that log on with the same user name and password. The problem is that when another user logs on to another computer the message comes up that their is already an instance of firefox running on that computer even though there really isn't. Only one instance can be run on the network at one time. I believe it is because firefox stores a shared profile as it thinks it is actually the same user even though it is being run on another computer. I repeat that each user that logs on uses the same user name and password but on different computers.

I am trying to get Firefox running on a large network where I have multiple users that log on with the same user name and password. The problem is that when another user logs on to another computer the message comes up that their is already an instance of firefox running on that computer even though there really isn't. Only one instance can be run on the network at one time. I believe it is because firefox stores a shared profile as it thinks it is actually the same user even though it is being run on another computer. I repeat that each user that logs on uses the same user name and password but on different computers.

Deploying a program to a user with UAC enabled causes LaunchWith32BitLauncher error and system crash

We are deploying a program to run as the logged on user on a Win 7 Sp1 client which runs as an EXE silently. It fails to execute and we believe that it's due to it being blocked by UAC.
When we examine the logs we see the following error in the Ccm32BitLauncher.log "the LaunchWith32BitLauncher failed with error code 0x800702e4" (The requested operation requires elevation) and in the execmgr.log we see "CreateProcess
or CreateProcessAsUser failed to execute command line with non-recoverable error 0x800702e4" along with "EnterRsRuningState failed to run script scriptname.exe 0x87d01101" (A fatal error has been encountered while attempting to run the program.
The program execution will not be retried.) Afterwards the system will either recycle hard or blue screen - sometimes its immediate and sometimes its 1-3 minutes later.
This program runs against the machine with the user's rights, which may or may not have admin rights, because its modifying something user specific. For the users that have admin rights it works fine, on other non admin users is when it crashes.
Anyone else come across this out there? We are running SCCM 2012 R2 (no CUs).
Thanks
- Dave

Hi,
If this problem is related to UAC, you could try to set GPO settings(User Account Control: Behavior of the elevation prompt for administrators in Admin Approval Mode) to
Elevate without prompting.
For more information:
ConfigMgr 2012: Application Deployment and User Account Control (UAC)
http://mwesterink.wordpress.com/2013/10/04/configmgr-2012-application-deployment-and-user-account-control-uac/
Note: Microsoft provides third-party contact information to help you find technical support. This contact
information may change without notice. Microsoft does not guarantee the accuracy of this third-party contact information.
Best Regards,
Joyce
We
are trying to better understand customer views on social support experience, so your participation in this
interview project would be greatly appreciated if you have time.
Thanks for helping make community forums a great place.

RUNAS another user: assistance with my batch file for control panel and explorer

Hello, for desktop support on end user or multi/generic user pcs it is nice to access common commands quickly from a batch file to run under your account. In xp both explorer and control panel apps launched without issues. The primary issue for explorer
is it appears to ignore the runas command (but the user has permissions to explorer so no error) while the control panel apps ignores run as well but does not have permissions so generates an error. The other commands all execute as the attempting admin's
account.
who it is for: the user with the admin account to execute on the user's desktop whom is a nonadmin
**please note, the commands appear to work if you do have admin rights**, the logged in user does not have admin rights to these utilities like in a common corporate environment.
"windows cannot access the specified device, path or file. You may not have the appropriate permissions to access the item."
Issue#1:
With win7 if you do a run as for explorer.exe via batch it will open, but will still be running under the signed in user. I have searched many threads on various sites and have not found a working solution for batch, this may be something I need to retire.
Issue#2: all control panel applets fail to launch through various methods.
SECTIONS THAT I AM STRUGGLING WITH:
runas /user:%auser%@DOMAINNAME "explorer.exe /separate"
runas /user:%auser%@DOMAINNAME "cmd /c Start /B rundll32.exe shell32.dll,Control_RunDLL appwiz.cpl"
"cmd /c start appwiz.cpl" also fails
alternative also fails:
runas /user:%auser%@chwi "cmd /c Start /B control.exe"
cls
@ECHO OFF
set /p auser= Enter your account login id:
:MyMenu
CLS
Echo Use the options below to run as with your admin account id:
echo.
ECHO 1 - Explorer C:\ - may not work with win7
ECHO 2 - Device Manager
ECHO 3 - Event Viewer
ECHO 4 - Services
ECHO 5 - Computer Management
ECHO 6 - REGEDIT
ECHO 7 - Command prompt
ECHO 8 - Local Users and Groups
echo 9 - launch task manager
ECHO a - Control Panel - may not work with win7
Echo b - Add/Remove programs - may not work with win7
Echo 0 - Exit
echo.
SET /P OPT=Please make a selection, and press enter:
if %OPT%==1 GOTO OPTION1
if %OPT%==2 GOTO OPTION2
if %OPT%==3 GOTO OPTION3
if %OPT%==4 GOTO OPTION4
if %OPT%==5 GOTO OPTION5
if %OPT%==6 GOTO OPTION6
if %OPT%==7 GOTO OPTION7
if %OPT%==8 GOTO OPTION8
if %OPT%==9 GOTO OPTION9
if %OPT%==a GOTO OPTIONa
if %OPT%==b GOTO OPTIONb
GOTO exit
:OPTION1
ECHO Executing Explorer C: window
echo.
runas /user:%auser%@DOMAINNAME "explorer.exe /separate"
GOTO:mymenu
:OPTION2
ECHO Executing Device Manager
echo.
runas /user:%auser%@DOMAINNAME "cmd /c Start /B devmgmt.msc"
GOTO:mymenu
:OPTION3
ECHO Executing Event Viewer
echo.
runas /user:%auser%@DOMAINNAME "cmd /c Start /B eventvwr.msc"
GOTO:mymenu
:OPTION4
ECHO Executing Services
echo.
runas /user:%auser%@DOMAINNAME "cmd /c Start /B services.msc"
GOTO:mymenu
:OPTION5
ECHO Executing Computer Management
echo.
runas /user:%auser%@DOMAINNAME "cmd /c Start /B compmgmt.msc"
GOTO:mymenu
:OPTION6
ECHO Executing regedit
echo.
runas /user:%auser%@DOMAINNAME "cmd /c Start /B regedit"
GOTO:mymenu
:OPTION7
ECHO Executing command prompt
echo.
runas /user:%auser%@DOMAINNAME "cmd /c Start /B cmd"
GOTO:mymenu
:OPTION8
ECHO Executing Local Users and Groups
echo.
runas /user:%auser%@DOMAINNAME "cmd /c Start /B lusrmgr.msc"
:OPTION9
ECHO Executing task manager
echo.
runas /user:%auser%@DOMAINNAME "cmd /c Start /B taskmgr.exe"
:OPTIONa
ECHO Executing control panel
echo.
runas /user:%auser%@DOMAINNAME "cmd /c Start /B control.exe"
:OPTIONb
ECHO Executing add/remove programs
echo.
runas /user:%auser%@DOMAINNAME "cmd /c Start /B rundll32.exe shell32.dll,Control_RunDLL appwiz.cpl"
GOTO:mymenu
GOTO EXIT
:EXIT

You guys I appreciate the feedback but please read my entire post and help if related, this is getting a bit frustrating.
a. I am not developing a powershell solution or "how do I launch them via command prompt" that is well known. The goal is to create an easy to use "run as helper" script for those that are not as savvy or do not have the commands memorized.
Even so many of your suggestions do not work because the user logged in does not have admin rights and the commands are blocked because of this restriction.
b. This is for the batch file in question, NOT "how do I launch command prompt as an admin"
c. Again, several options work, several do not (network connections and programs and features do not) must likely due to same limitations as explorer.exe or UAC
d. this is not "how do I launch the utilities by command line" it is "how do I launch them as the admin WHEN the current user does not have admin rights". The entire script works on a pc if you have admin rights because its launching
it instead AS the current user, in that case the current user has admin rights therefore it doesnt reproduce the issue.
e. running by control.exe using the app name or with cpl does not resolve the issue.
f. I did not post that command prompt is having issues launching, I wrote a couple times that the options in my script do work such as command prompt. Even if you launch command prompt you cannot launch programs and features or network connections with your
admin account with or without an additional runas command.

Log on with a dialog user

Hi all Basis Gurus,
This is my question to Basis forum Please reply me immediately. while running ITS in CRM 50 i am getting mentioned below error (Logon on with a dialog user). can u please guide what are things i have to follow to resolve this prblem.
Please suggest me what shall i do.
Error when processing your request
What has happened?
The URL http://sapsrv.techmahindra.com:8010/sap/public/bc/its/mimes/system/SL/page/hourglass.html was not called due to an error.
Note
The following error text was processed in the system DEV : Log on with a dialog user
The error occurred on the application server sapsrv_DEV_10 and in the work process 0 .
The termination type was: ERROR_MESSAGE_STATE
The ABAP call stack was:
Module: %_HTTP_START of program SAPMHTTP
What can I do?
If the termination type was RABAX_STATE, then you can find more information on the cause of the termination in the system DEV in transaction ST22.
If the termination type was ABORT_MESSAGE_STATE, then you can find more information on the cause of the termination on the application server sapsrv_DEV_10 in transaction SM21.
If the termination type was ERROR_MESSAGE_STATE, then you can search for more information in the trace file for the work process 0 in transaction ST11 on the application server sapsrv_DEV_10 . In some situations, you may also need to analyze the trace files of other work processes.
If you do not yet have a user ID, contact your system administrator.
Error code: ICF-IE-http -c: 000 -u: SAPSYS -l: E -s: DEV -i: sapsrv_DEV_10 -w: 0 -d: 20070223 -t: 144317 -v: ERROR_MESSAGE_STATE -e: Log on with a dialog user
HTTP 500 - Internal Server Error
Your SAP Internet Communication Framework Team
Regds,
Govinda ([email protected])

I have checked with that setting,but still it is showing the below error.is there any another way?
Error when processing your request
What has happened?
The URL http://gcecc62:8000/sap/bc/webdynpro/sap/zwda_logo_demo was not called due to an error.
Note
The following error text was processed in the system ECC : Die URL enthält keine vollständige Domainangabe (gcecc62 statt gcecc62.).
The error occurred on the application server gcecc62_ECC_00 and in the work process 0 .
The termination type was: RABAX_STATE
The ABAP call stack was:
Method: CHECK of program CX_FQDN=======================CP
Method: LATE_CONSTRUCTOR of program CL_WDR_UCF====================CP
Method: HANDLE_REQUEST of program CL_WDR_UCF====================CP
Method: IF_HTTP_EXTENSION~HANDLE_REQUEST of program CL_WDR_MAIN_TASK==============CP
Method: EXECUTE_REQUEST of program CL_HTTP_SERVER================CP
Function: HTTP_DISPATCH_REQUEST of program SAPLHTTP_RUNTIME
Module: %_HTTP_START of program SAPMHTTP

We are sorry, but we are unable to complete your request.•The Office 2007 Product Key provided is already associated with another user on this site. Please log in with the user information originally used with this Office 2007 Product Key.

Over the years I have had many ISP and email addresses - but now we have finally gone almost fully virtual...
I have a live login and MS ID 4 my SkyDrive account but I only use my MS touch with 8.1, SkyDrive and office 365 for mobility.
And I still like to backup to my own server!!!
What would be good is if I can put all the software licenses and product keys of the software and keep a record of my mac addresses for hardware and even static IP's in a file or a secure location within the MS online store.
That's where MS wants me to get my computing needs from in future and I will always be able to retrieve it in future but what about the $$$$$ I have spent on software, hardware and applications prior to now???
I know u guys love 2 collect data 4 marketing analysis,
4 example I have an old PC that is still running a server from last century - if you knew about it a simple script would allow you to offer upgrades or at least relevant MS products - UNLIKE the rubbish adds I just turn off or tune out
now...
Why cant I add products previous online email purchases into the 1 MS live ID account where I can keep it together? If you make that available I don't have to have separate steam accounts, EA game accounts, ASUS and adobe accounts etc
etc.
What has brought me 2 this is I was looking for my office pro 2007 disks to rebuild a HOME USE ONLY windows 7 laptop (NO touch screen so 8.1 is no benefit at all)
I HAVE 4 Genuine PRODUCT KEYs for Office 2007 BUT EVERY TIME I WENT TO DOWNLOAD the software - regardless of the key I used - I got the error message: We are sorry, but we are unable to complete your request.•The Office 2007 Product Key
provided is already associated with another user on this site. Please log in with the user information originally used with this Office 2007 Product Key.
That's crap - This is a clean brand spanker install of Win7 and there was nothing b4 I put the oem drivers from Toshiba back on.
I looked at dozens of support pages and forum blogs and tried for hours to get a copy to download - including incognito and other logins but because my default PC name is also my MS Windows live ID the same error was repeated.
I keep away from the non MS sites for these things and with good reason - there were heaps of similar users with the same issue or very close to it that had downloaded from a supposed MS copy from eValue or digital river etc and the next
thing was total corruption of the OS.
EVENTUALLY I found a LIVE MS chat on a support site in the US and she gave me a link to a slightly older version which will need updating and some reg edit changes but so far, so good.
The point is - what a crock !
I should be able to just keep all my software, drivers, updates, service packs, and versions that I have upgraded in the MS store.
If Microsoft aren't going to support XP or Office 2003 and eventually 2007, vista & Windows7 not far behind??? then that's still no excuse for them to put these restrictions and limits when I OWN my copy of the software!!
Unlike office 365 and SkyDrive space which is described in the T&C (that we all read before ticking that radial button to agree of course) as ONLY under a leased licence.
IF Microsoft can support AND develop software that supports SQL2000 Servers, why is it so hard to archive and keep the same info for everyone???

Over the years I have had many ISP and email addresses - but now we have finally gone almost fully virtual...
I have a live login and MS ID 4 my SkyDrive account but I only use my MS touch with 8.1, SkyDrive and office 365 for mobility.
And I still like to backup to my own server!!!
What would be good is if I can put all the software licenses and product keys of the software and keep a record of my mac addresses for hardware and even static IP's in a file or a secure location within the MS online store.
That's where MS wants me to get my computing needs from in future and I will always be able to retrieve it in future but what about the $$$$$ I have spent on software, hardware and applications prior to now???
I know u guys love 2 collect data 4 marketing analysis,
4 example I have an old PC that is still running a server from last century - if you knew about it a simple script would allow you to offer upgrades or at least relevant MS products - UNLIKE the rubbish adds I just turn off or tune out
now...
Why cant I add products previous online email purchases into the 1 MS live ID account where I can keep it together? If you make that available I don't have to have separate steam accounts, EA game accounts, ASUS and adobe accounts etc
etc.
What has brought me 2 this is I was looking for my office pro 2007 disks to rebuild a HOME USE ONLY windows 7 laptop (NO touch screen so 8.1 is no benefit at all)
I HAVE 4 Genuine PRODUCT KEYs for Office 2007 BUT EVERY TIME I WENT TO DOWNLOAD the software - regardless of the key I used - I got the error message: We are sorry, but we are unable to complete your request.•The Office 2007 Product Key
provided is already associated with another user on this site. Please log in with the user information originally used with this Office 2007 Product Key.
That's crap - This is a clean brand spanker install of Win7 and there was nothing b4 I put the oem drivers from Toshiba back on.
I looked at dozens of support pages and forum blogs and tried for hours to get a copy to download - including incognito and other logins but because my default PC name is also my MS Windows live ID the same error was repeated.
I keep away from the non MS sites for these things and with good reason - there were heaps of similar users with the same issue or very close to it that had downloaded from a supposed MS copy from eValue or digital river etc and the next
thing was total corruption of the OS.
EVENTUALLY I found a LIVE MS chat on a support site in the US and she gave me a link to a slightly older version which will need updating and some reg edit changes but so far, so good.
The point is - what a crock !
I should be able to just keep all my software, drivers, updates, service packs, and versions that I have upgraded in the MS store.
If Microsoft aren't going to support XP or Office 2003 and eventually 2007, vista & Windows7 not far behind??? then that's still no excuse for them to put these restrictions and limits when I OWN my copy of the software!!
Unlike office 365 and SkyDrive space which is described in the T&C (that we all read before ticking that radial button to agree of course) as ONLY under a leased licence.
IF Microsoft can support AND develop software that supports SQL2000 Servers, why is it so hard to archive and keep the same info for everyone???

[Forum FAQ] Group Policy Preferences Scheduled Tasks Item not working when the option Run whether user is logged on or not is selected

Scenario:
We use one of the following Group Policy Preferences Scheduled Tasks item to deploy a task to clients:
Computer Configuration -> Control Panel Settings -> Scheduled Tasks -> New -> Scheduled Task (At least Windows 7)
Computer Configuration -> Control Panel Settings -> Scheduled Tasks -> New -> Immediate Task (At least Windows 7)
User Configuration -> Control Panel Settings -> Scheduled Tasks -> New -> Scheduled Task (At least Windows 7)
User Configuration -> Control Panel Settings -> Scheduled Tasks -> New -> Immediate Task (At least Windows 7)
(Note that on some platforms, "At least Windows 7" is replaced with "Windows Vista and later.")
After designating a user account to run the task, we select “Run whether user is logged on or not” option, and “The Do not store password…”
check box is automatically grayed out (See Figure 1).
Figure 1
After finishing configuring the task item, on a client, we run command
gpupdate/force to forcefully update group policy. However, on the client, when we check if the task is listed in Task Scheduler snap-in, the task is not displayed, and when we run
gpresult/h report.html to collect group policy result for troubleshooting, we see an error as similar as shown in the following figure (Figure 2).
Figure 2
Cause:
To make the scheduled task run whether the user is logged on or not, we need to store the password of the designated user account. However, for the content of the scheduled
task item is stored in Sysvol where it’s not safe to store passwords, this function has been deprecated.
Workaround:
We can run the task with system account
NT Authority\System, or we can use specific user accounts to run the task when the given user is logged on. (See Figure 3)
Figure 3
Reference:
MS14-025: Vulnerability in Group Policy Preferences could allow elevation of privilege: May 13, 2014
http://support.microsoft.com/kb/2962486
Please click to vote if the post helps you. This can be beneficial to other community members reading the thread.

Hello Everyone,
Succeeded !!!!!!!
Even i was struggling with this same Problem to execute a batch via Window scheduler and set the setting to "Run whether the user is logged in or not".
I tried many time but the batch runs with " Run
whether user is logged on" and not with "Run
whether user is logged on or not".
what i discovered is that there was one mapped drive
path in my batch file which was not the complete path like y:/AR.qvw actually what i did i changed that map path to the complete path like \\servnamename\d$\AR.qvw and the batch executed successfully with the setting "Run
whether user is logged on or not"
The
conclusion is that check the dependency of the script on external resources because when you check this option "Run
whether user is logged on or not" It actually conflicts. This my discovery.
If
you have any question write me on [email protected]
Thanks
& Regards,
Arun

Users Logged in with Temp Profile on Windows 7

Last year, my company started to experience a strange correlation with the number of Windows 7 computers deployed and the number Help Desk calls regarding Temp Profile Logins. I did open a ticket with Microsoft Support, but had to prematurely put it on hold
due to other projects.
From my work with Microsoft, we performed ETL logging, documented Handle Output, ran Procmon, and collected MSDT data. While not always successfully documented, Microsoft started to point out the possibility a process in the background was timing out. When
timed out, users became logged in as a TEMP user, thus limiting access to network drives and other domain resources.
The company I work for is part of a larger enterprise and other divisions do not experience this issue. This is solely my companies issue and only came to the forefront after we performed a large migration to Windows 7.
Other forums have provided me and my team with the means of fixing the TEMP profile login, after it occurs. We go into REGEDIT and modify the ProfileList and edit the necessary .BAK key. Either way, this corrects the issue, but does not prevent it from occurring
again.
I guess my questions is; where can I look to trouble shoot this better? I can't rely on Microsoft analyzing my records and trying to deduce what is occurring. I want to get more information and find a resolution. Thank you all in advance.

No, we do not use roaming profiles in our environment. Local user profiles are used for every computer, regardless of purpose/role in the organization. Good question, though. Thank you.
Hi,
I would like you to confirm following question with me:
1. are your computers in a domain?
2. What do you mean about the local user profile, the personal user? If it's a domain environment, does this issue happen on domain user account?
3. How did you migrate your user profiles during migrating to Windows 7?
Considering if the local user profile is corrupted, and the regedit fix cannot fix your issue completely.
Please create a new user account on the problematic computer and test for a while to see if the issue still persists.
If not, we may need to repair the corrupted user profiles.
If the issue still persists, considering the system issue.
Please help to collect the logon trace and post back for our research.
1. Logon as an Administrator of the computer you want to trace (either a local Administrator or Domain Admin account that is a member of the local machine's Administrators group).
2. Open an elevated command prompt and run this command from WPT Install directory (default path is C:\Program Files\Microsoft Windows Performance Toolkit.
Install WPT from this link:http://msdn.microsoft.com/en-us/windowsserver/bb980924.aspx
xperf -on base+latency+dispatcher+NetworkTrace+Registry+FileIO -stackWalk CSwitch+ReadyThread+ThreadCreate+Profile -BufferSize 128 -start UserTrace -on "Microsoft-Windows-Shell-Core+Microsoft-Windows-Wininit+Microsoft-Windows-Folder
Redirection+Microsoft-Windows-User Profiles Service+Microsoft-Windows-GroupPolicy+Microsoft-Windows-Winlogon+Microsoft-Windows-Security-Kerberos+Microsoft-Windows-User Profiles General+e5ba83f6-07d0-46b1-8bc7-7e669a1d31dc+63b530f8-29c9-4880-a5b4-b8179096e7b8+2f07e2ee-15db-40f1-90ef-9d7ba282188a"
-BufferSize 1024 -MinBuffers 64 -MaxBuffers 128 -MaxFile 1024
Note: This syntax works on Windows Vista (Windows Server 2008) and Windows 7 (Windows Server 2008 R2) computers
3. Press CTRL+ALT+DEL and then Switch User.
4. Logon with the user account experiencing the temp user logon to reproduce the issue.
5. Stop the trace. While logged on with the slow user account, open an elevated CMD prompt and type:
xperf -stop -stop UserTrace -d merged.etl
6. upload the merged.etl file into Onedrive or similar file sharing service, and post back the shared link here.
Kate Li
TechNet Community Support

Logging on with the same user?

Hi all,
I know there is some rule that allows a user to log on more than once. A client of mine says they could always log in to the same company twice with the same username, but now they can't. They can only log on to 2 different companies with the same user name.
Was there a change made or am I missing something? I have tested on a single computer. I open 2 instances of SAP Business One 2007 and log in with the same user into the same company. THe first one logs on fine, the second one says "This user is already connected to this company". If I log on to a different company with that user it logs in.
I really thought you could log on with the same user to the same company.
The company has a distributed environment and people run around every now and again logging on at different computers (especially supervisors). This is a critical issue for them.
Please help
Thanks,
Adele

Adele,
I am not sure if you might have changed the default layout of SQL Management Studio, so you should
log on to Management Studio and go to Menu 'Window' -> 'Reset Window Layout'.
This will restore the default layout, which usually is the very same after a fresh SQL Server 2005 installation.
Now you should find on the left hand side the so called Object Explorer. In the Object Explorer Window you should see the SQL Server name, below of this should be
SQL Server name
+Databases
+Security
+Server Objects
+Replication
-Management
      +Mantenance Plans
      +SQL Server Logs
          Activity Monitor
+Notification
Maybe there are some more entries, depending on the options choosen during installation.
Kind regards
Mario Schoenberg
Senior Support Consultant
SAP Business One Forums Team

NEED TO DETERMINE USERS THAT HAVE LOGGED IN WITH A SPECIFIC ROLE

I have a requirement to determine which users have logged in with a specific
role or accessing a specific application. I know I can use the
ORASSO.WWSSO_AUDIT_LOG_TABLE_T table to see the users that have logged in, but
need to know which table to join with in order to determine which group that a
user belongs to. It would also be nice to figure out which users are accessing
a given application.
We are running AS 9.0.4.2 with ORASSO database 9.0.1.5.
Can you identify which tables I will need to use to satisfy my requirement?
Thanks, Mike

Thanks! I modified this slightly to get what I needed but I didn't think that I could get this from dba_tab_privs. You were a huge help!
select table_name, grantee
from dba_tab_privs
where
table_name in ('UTL_FILE', 'UTL_TCP', 'UTL_HTTP', 'UTL_SMTP', 'DBMS_LOB', 'DBMS_SYS_SQL', 'DBMS_JOB', 'DBMS_BACKUP_RESTORE')
and privilege='EXECUTE'
order by table_name;

Task Scheduler wont run when set to "Run whether user is logged on or not"

Hi
I have two 2008 R2 servers with the same task and pretty much the same powershell script the schedule is running. The powershell just runs a daily snapshot of the server. One server it runs fine with "Run whether user is logged on
or not" selected. But when selected on the second server it won't run. I mean, the schedule says its run, but the poweshell doesn't launch and do its job. Everything is the same on each server apart from what is being snapshotted.
Even the location of where the snapshot is going is the same. Same domain account, same password. When I change it to "Run only....." it runs fine. But the server may not be logged in all the time, so I need it to run whatever.
Any help would be greatly appreciated.
Thanks
Matt

I'd check in the windows system and application event logs. Also check the task log.
Event Viewer\Applications\Microsoft\Windows\TaskScheduler\Operational
Regards, Dave Patrick ....
Microsoft Certified Professional
Microsoft MVP [Windows]
Disclaimer: This posting is provided "AS IS" with no warranties or guarantees , and confers no rights.

Task Scheduler Security Option - Run if user is logged in or not

using Windows Server 208 R2 Terminal Server - Running .NET 4.0 programs
We are running .NET 4.0 Windows Forms programs using Task Scheduler with the Security Option - Run whether user is logged in or not.
When the Task Scheduler starts these jobs they either not not run or they fail.
Questions:
1. What shell is used by Task Scheduler with the setting "run whether user is logged in or not" ?
2. Is there some way to detect this shell or environment in a .NET program?
I am trying to determine if I can modify the .NET programs so they will run in this shell with no errors.
Thank you
MisterT99

Hi Mister,
In addition, Since you need to launch a GUI application through Task Scheduler, so this task also need to run interactively.
However, if the item "Run whether user is logged on or not" is selected, tasks will not run interactively, so we need to select the "Run only when user is logged".
I recommend you can change the item "Change user or group" in security option and add a group, which will make sure your application will run interactively for all users in the group when the users logon.
If there is anything else regarding this issue, please feel free to post back.
If you have any feedback on our support, please click here.
Best Regards,
Anna Wang
TechNet Community Support
Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Support, contact [email protected]

I am running safari 7.0.6 with IOS 10.9.4. after the mac has been asleep and I log on I cannot open safari as it appears to have crashed. the workaround to this is to reboot the IOS and log back in after which safari will open.

I am running safari 7.0.6 with IOS 10.9.4. after the mac has been asleep and I log on I cannot open safari as it appears to have crashed. the workaround to this is to reboot the IOS and log back in after which safari will open. Any ideas on how to resolve this?

Launch the Console application in any of the following ways:
☞ Enter the first few letters of its name into a Spotlight search. Select it in the results (it should be at the top.)
☞ In the Finder, select Go ▹ Utilities from the menu bar, or press the key combination shift-command-U. The application is in the folder that opens.
☞ Open LaunchPad. Click Utilities, then Console in the icon grid.
Step 1
For this step, the title of the Console window should be All Messages. If it isn't, select
          SYSTEM LOG QUERIES ▹ All Messages
from the log list on the left. If you don't see that list, select
          View ▹ Show Log List
from the menu bar at the top of the screen.
In the top right corner of the Console window, there's a search box labeled Filter. Initially the words "String Matching" are shown in that box. Enter the name of the crashed application or process. For example, if iTunes crashed, you would enter "iTunes" (without the quotes.)
Each message in the log begins with the date and time when it was entered. Select the messages from the time of the last crash, if any. Copy them to the Clipboard by pressing the key combination command-C. Paste into a reply to this message by pressing command-V.
☞ The log contains a vast amount of information, almost all of which is irrelevant to solving any particular problem. When posting a log extract, be selective. A few dozen lines are almost always more than enough.
Please don't indiscriminately dump thousands of lines from the log into this discussion.
Please don't post screenshots of log messages—post the text.
☞ Some private information, such as your name, may appear in the log. Anonymize before posting.
Step 2
In the Console window, select
          DIAGNOSTIC AND USAGE INFORMATION ▹ User Diagnostic Reports
(not Diagnostic and Usage Messages) from the log list on the left. There is a disclosure triangle to the left of the list item. If the triangle is pointing to the right, click it so that it points down. You'll see a list of crash reports. The name of each report starts with the name of the process, and ends with ".crash". Select the most recent report related to the process in question. The contents of the report will appear on the right. Use copy and paste to post the entire contents—the text, not a screenshot.
I know the report is long, maybe several hundred lines. Please post all of it anyway.
If you don't see any reports listed, but you know there was a crash, you may have chosen Diagnostic and Usage Messages from the log list. Choose DIAGNOSTIC AND USAGE INFORMATION instead.
In the interest of privacy, I suggest that, before posting, you edit out the “Anonymous UUID,” a long string of letters, numbers, and dashes in the header of the report, if it’s present (it may not be.)
Please don’t post other kinds of diagnostic report—they're very long and rarely helpful.

CSS runs at user log on with UAC, wants to restore keys, requires non-existant user as admin.

Similar Messages

Maybe you are looking for