Ifweb60 processes run as local system account on w2k- how do i change?
i am running forms 6i on an 2000 box using
the forms servlet config and oc4j with 9ias.
this runs fine except that the ifweb60 processes
are owned by the local system account. this in
turn means i can't map the forms60_path to a
network drive because i can't give network
privileges to a local system account. so,
how do i change the account that spawns the
ifweb60 processes?
thanks,
marta
Never mind, resolved this myself by using the netbios name to substitute the value I need on each individual domain.
$domain = Get-ADDomain | Select-Object -expandproperty netbiosname
Set-Location "dc=$domain,dc=dom,dc=co,dc=uk'
Sets location as:
PS AD:\dc=a,dc=dom,dc=co,dc=uk>
ON another domain same script results
PS AD:\dc=b,dc=dom,dc=co,dc=uk>
Exactly what I needed!
Similar Messages
-
Running 10G as a non local system account on Windows Server 2003
Hi,
I have an Oracle 10G database running on Windows Server 2003, SP2. I have created the database and it all works fine while the service is running as the default local system account. However, when I change the user that the service runs as to a different account the database starts and opens, and I can log on as SYS using a bequeath connection but I am unable to log on as any other user going through the listener. The listener responds to TNSpings, and all seems to be OK. When I switch it back to the local system user again it all works fine.
Can anyone offer any advice or help?
Thanks,
RobThat's probably because the listener is still running as the local system account. Have you tried to change the listener service to run as the same account as the Oracle service?
-
Environment:
OS: Windows 7 32/64 bit, Windows 2008 Server 64
bit/ Windows 2012 Server 64 bit
Priority:
- Critical
Requirement: - Since
the Windows Service is running under the Local System Account, we would like to emulate this same behaviour.
Basically, we would like to run CMD.EXE under the Local System Account. So that we can map a network drive to be used by a service using following
command
net use z: \\servername\sharedfolder /persistent:yes.
Already Attempt:
We tried to launch the CMD.exe using the DOS Task Scheduler AT command. Here’s a sample command:
AT 10:36 /interactive cmd.exe
But I received a warning that “due
to security enhancements, this task will run at the time excepted but not interactively.”
It turns out that this approach will work for XP, 2000 and Server 2003 but due to session isolation
Interactive services no longer work on Windows 7, Windows Server 2008 and above.
2. We
tried to create a secondary Windows Service via the Service Control (sc.exe) which merely launches CMD.exe.
<Drive>:\sc create RunCMDAsLSA binpath= "cmd" type=own type=interact <Drive>:\sc
start RunCMDAsLSA
In this case the service fails to start and results it the following error message:
FAILED 1053: The service did not respond to the start or control request in a timely fashion.
3. One
suggestion, we found to launch CMD.exe via a Scheduled Task, but
it is not giving any option to launch CMD.exe in interactive mode; so that I can map network drive using net command.
4. I read an article, which
demonstrates the use of PSTools from SysInternals. I launched the command line and executed following command
psexec -i -s cmd.exe
PSTools worked fine, but It seems that in scope of Sysinternals Software License
Terms. You may not "use the software for commercial software hosting services."
Application will deploy on client, which will be like commercial,
so we are not able to use PSTools.
Kindly assist us for achieving the requirement. We have tried all the ways, but nothing is working for us. Kindly suggest.
I will be really thankful.Hi Sir,
Nothing worked from above for us. You can see our remarks on posted query.
That’s why, we posted on forum.
And there will not be any vulnerability, because, if we will use "net
use ..."
in network domain; definitely,
we will provide username and password of mapped drive system.
And, that system, itself is given by client; so that, there must not be any vulnerability; they are ready to provide user name and password.
We need a way; by which we can complete the requirement. Kindly assist.
Regards,
S. P. Singh -
Hi there,
In my SharePoint 2010 farm - on the SQL Server:
The MSSQLSERVER service is running under Local System.
1. Can I change it to run as a normal Domain User account?
2. Does it need any extra privileges?
3. Is it a safe thing to do?
Brief description will be very useful.
Thanks so much.You need to create Service account with password never expire option+ User never change password
Then you need to go through below recommendation from Microsoft
Security Considerations for a SQL Server Installation
Planning for Services, Accounts, and Connections
Hope you got starting point
Please 'propose as answer' if it helped you, also 'vote helpful' if you like this reply. -
SMA on Windows 7 with local system account
Hello,
I use SMA on Windows 7.
When I launch the wizard (sma.exe) to capture the profiles with an admin account : it works, i have myfile.sma and myfile.sma.DriveC, which contains all profiles.
But if I launch the same wizard (sma.exe) with Local System account, none of profiles are saves, so I don't have a myfile.sma.DriveC, juste myfile.sma one.
(i must use Local System account)
(to launch sma.exe as a local system account on Windows vista/7, you have to run cmd.exe as an admin, then launch "psexec -i -s cmd.exe" (so you have to dl psexec))
ThanksWhen I launch SMA under the "SYSTEM" account, it seems the problem is that the user folders are not selected by default (even if you select the user accounts to migrate). So you have to select the files and folders that you want to migrate (e.g. the "c:\users" folder). When I did this, then I got both the .sma file and the .DriveC file in the location that I specified.
The way I run as "SYSTEM" is by replacing c:\windows\system32\magnify.exe with c:\windows\system32\cmd.exe and then choosing the Magnifer option at the windows logon screen (note that you have to take ownership of magnify.exe in order to replace it). This gives me a command prompt at the logon screen to do whatever I want to.
I don't think SMA was really designed to be run this way (under the "SYSTEM" account), so if you're still having problems after trying the above, then you're going to need to change your process to run SMA under an actual user account or else find some other tool to use. -
Hello,
I have a WScript File that includes an external resource (js file).
It works on one computer and it does not work on another computer.
If I run this file from a normal admin command prompt everything runs fine on both computers.
If I run this file from the Local System account using PsExec it runs fine on one of the computers and throws an error "Cannot Retrieve referenced URL" on the other computer.
The reason I want it to run from the Local System account is that it is executed from a Windows Service.
Is there some setting or some way for the IE cache to get corrupt on the Local System account or something like that?JRV,
You are by far the worst 'support' person I've ever seen. If you aren't going to be thoughtful in providing support, don't pretend. If you're going to pretend, leave your condescension on the shelf. You have provided no thoughtfulness whatsoever to his issue,
and have in no way improved the discourse. You are arrogant and condescending without exhibiting any intelligence whatsoever. I'm impressed Matt kept calm through your demeaning, counterproductive diatribes.
Matt,
First I'd check UAC settings, because I believe that can change how elevation works substantially.
Second, I would check the versions of wscript.exe on both machines, both in System32 and SysWow, and I'd check for updates bypassing WSUS to make sure there's not something silly going on there (totally a shot in the dark, catch-all theory).
Have you made any headway in the last few weeks?
-John
This is not a support forum and it is not for assistance in fixing broken configurations. It is a scripting forum. The OP proved that the issue is not the script but the environment it is running in. You should not get mad just because you are
not getting satisfaction.
¯\_(ツ)_/¯ -
Scheduled Task to run as Local System cannot access the Netlogon Share in Windows 8.1
I've created a Scheduled Task that is setup to run as the local System Account which uses cscript.exe to execute a VBScript residing on the Domain Netlogon Share. It works perfectly on Windows 7, but fails miserably on Windows 8.1. When I open a command
prompt as the System account and try to run the script from the Netlogon share manually, I get the following error:
CScript Error: Loading script \\<FullyQualifiedomainName>\Netlogon\xyz.vbs failed (The account used is a computer account. Use your global user account or local user account to access this server. ).
Is there something different I need to set in Windows 8 to get this to run?
Thank you!!
Eric MyersHi Eric,
What's the result of Arnav's question?
How did you set it? Please set it as the following steps:
1.Go to Start > Administrative Tools > Task Scheduler
2.In the Task Scheduler window double click your task, and on the "General" tab, under "Security options" section, click the "Change User or Group" button.
4.Make sure "From this location" is set to the local machine name (to change click "Locations" button and select the local computer name)
5.Type "SYSTEM" in the text box and press ok . Under "When running the task, use the following user account:" you should see "NT AUTHORITY\SYSTEM".
Karen Hu
TechNet Community Support -
FMS Developer Ed & Local System account
Is it only possible to run the FMS service as the Local
System account in Windows Server 2003? I tried to change the Log On
params to a user with privileges to another server's share but the
service won't start up afterward. And in the info box in the FMS
Admin app there is a little tiny tooltip within the popup message
that says something about "License info". I changed the user back
to Local System account and the service started up right away. I'm
trying to test an app's ability to access a different path that's
set in the application.xml <VirtualDirectory><Streams>
node.
So, is it a limitation of the FMS Developer edition or is it
something on our end? I thought the only limitation was 10
conncections.... i have unchecked that from there and again after some minutes say 10 -15 minutes it gets locked ...
Hi,
Perhaps you can look into these areas for stored (and expired) password:
Check to see if there are any Services that is running using the affected administrator account.
Check to see if there are any Scheduled Tasks running using the affected administrator account.
Hope that helps.
Cheers,
Tas Chew -
Flash Player v9 MSI installation fails when running as "Local System"
Hi,
I'm going to distribute Adobe Flash Player 9 via SMS.
I’m using Adobe’s own msi package:
“install_flash_player_active_x.msi”. All browsers are
IE6 (Internet Explorer v6). All systems are running Windows XP SP2
+ all updates.
I’m well aware of ISScript 10.50’s issue with the
DCom RUNAS keys.
The MSI-package works fine as long as it is executed by a
User with Admin rights (running in user environment).
But as it is installed by SMS (running as “Local
System”), it fails.
I have tried to execute it as “Local System” with
User Interface. I get the following error message:
The wizard was interrupted before Adobe Flash Player 9 Active
X could be completely installed.
Your system has not been modified. To complete installation
at another time, please run setup again.
Click Finish to exit the wizard.I dropped the original Adobe MSI-package. Made a new, and
working, using the FlashPlayer Merge Module. -
Somehow I have 2 iCloud accounts...how do I change the account one of my devices is logged into?
Somehow I have 2 iCloud accounts...How do I change the account one of my devices is logged into?
If you are using your main account for iTunes, you should continue to do so, otherwise you will lose access to many of your purchased items made that account.
You can delete the AOL account for iCloud only on your iPhone and first iPad, by going to settings > iCloud, scrolling down and hitting delete account button. You will then enter your me account details into the iCloud settings.
When you delete your AOL account from the iCloud settings, the phone should give you the option of keeping your data on the phone, you need to make sure that you choose this option, and also choose the option to merge when you add your new account back. -
I have my own iCloud account. But how do I change it on my iPhone 4? My husband is on there as of now.
Webbles
Go to
1. Settings
2. Icloud
3. Scroll down - delete account
4, Sign back in with your icloud account
Hope this helps -
So, I'm having some problems getting a logon script to work. I need a way to deploy the agent that we use via login/startup scripts and what I have works fine if the user has admin rights, or if UAC is disabled. I've tried to convert the .exe
to an .msi to make it easier, but the .msi never works and it's only distributed as an .exe. We deploy this to different clients, I can't disable UAC in their environment unless they specifically tell us to. Can anyone think of a way around this?
I've been searching for days and I'm just lost. If we could execute the file as the system account, or connect to shares using a startup script instead of logon, that would be perfect. Basically what it does is check to see if the process for the
agent is running (agentmon.exe) so we don't attempt to install it if it is already installed, if it's not, then it calls on a different agent installer depending on the IP address of the system (for clients that have more than one location). Here's what
I've got written that works for me in my test environment:
Const strAgent1 = "\\home.wiginton.local\SysVol\home.wiginton.local\Policies\{CD4ED3BD-0709-4E3D-A303-C9E3B0F5198D}\User\Scripts\Logon\Test-KcsSetup1.exe"
Const strAgent2 = "\\home.wiginton.local\SysVol\home.wiginton.local\Policies\{CD4ED3BD-0709-4E3D-A303-C9E3B0F5198D}\User\Scripts\Logon\Test-KcsSetup2.exe"
Const strAgent3 = "\\home.wiginton.local\SysVol\home.wiginton.local\Policies\{CD4ED3BD-0709-4E3D-A303-C9E3B0F5198D}\User\Scripts\Logon\Test-KcsSetup3.exe"
Const strFolder = "C:\Temp\"
Const Overwrite = True
dim objFSO, objNIC1, arrNIC, strIP, strMask, objShell, objWMIService
dim
'Checks for Kaseya agent process, AgentMon.exe, exits if running
Set objWMIService = GetObject ("winmgmts:")
Set proc = objWMIService.ExecQuery("select * from Win32_Process Where Name='agentmon.exe'")
If proc.count > 0 Then
WScript.Quit
End If
'Instantiate a NIC configuration object
Set objNIC1 = GetObject("winmgmts:").InstancesOf("Win32_NetworkAdapterConfiguration")
'Instantiate a shell object
Set objShell = CreateObject("wscript.shell")
Set objFSO = CreateObject("Scripting.FileSystemObject")
'Create Temp Dir if it doesn't exist
If Not objFSO.FolderExists(strFolder) Then
objFSO.CreateFolder strFolder
End If
For Each arrNIC in objNIC1
if arrNIC.IPEnabled then
StrIP = arrNIC.IPAddress(i)
strMask = arrNIC.IPSubnet(i)
Set WshNetwork = WScript.CreateObject("WScript.Network")
end if
next
Function NetworkID(Address, Mask)
Dim AddressOctets, MaskOctets, Result, N
AddressOctets = Split(Address, ".")
MaskOctets = Split(Mask, ".")
ReDim Result(UBound(AddressOctets))
For N = 0 To UBound(AddressOctets)
Result(N) = AddressOctets(N) And MaskOctets(N)
Next
NetworkID = Join(Result, ".")
End Function
Select Case NetworkID(strIP,strMask)
Case "192.168.0.0"
' Kaseya install commands for 192.168.0.0 subnet
objFSO.CopyFile strAgent1, strFolder, Overwrite
Wscript.Sleep 1*60*1000
objShell.run "C:\Temp\Test-KcsSetup1.exe"
Case "192.168.1.0"
' Kaseya install commands for 192.168.1.0 subnet
objFSO.CopyFile strAgent2, strFolder, Overwrite
Wscript.Sleep 1*60*1000
objShell.run "C:\Temp\Test-KcsSetup2.exe"
Case "192.168.2.0"
' Kaseya install commands for 192.168.2.0 subnet
objFSO.CopyFile strAgent3, strFolder, Overwrite
Wscript.Sleep 1*60*1000
objShell.run "C:\Temp\Test-KcsSetup3.exe"
Case Else
' Some sort of error checking. Maybe a BLAT SMTP command to send an email
End Select
Set objWMIService = Nothing
Set objNIC1 = Nothing
Set objShell = Nothing
Set WshNetwork = Nothing
Wscript.quitYou need to read the documentation carefully:
The Deploy Agents install package is created using a Configure Automatic Account Creation wizard. The wizard copies agent settings from an existing machine ID or machine ID template and generates an install package called
KcsSetup.All settings and pending agent procedures from the machine ID you copy from—except the machine ID, group ID, and organization ID—are applied to every new machine ID created with the package.
Including Credentials in Agent Install Packages
If necessary, an agent install package can be created that includes an administrator
credentialto access a customer network. Credentials are only necessary if users are installing
packages on machines and do not have administrator access to their network. The administrator credential is encrypted, never available in clear text form, and bound to the install package.
¯\_(ツ)_/¯ -
I have set up the iCloud on the iPhone with a Apple ID different from the ID , I use for the Apple Store. I want to change it to the same ID, How can I change the Apple ID on the iCloud??
Hi
https://appleid.apple.com/
and
https://www.icloud.com
are two different accounts
Therefore you should still use your "old" (existing) iCloud mail address - you cannot change the iCloud mail address.
However you could add an alias instead to you iCloud account.
http://support.apple.com/kb/PH2622?viewlocale=en_US&locale=en_US -
Old iCloud email account on iPhone how do I change to the new one
I have changed my email address in Icloud on computer how do I change it on the iphone x
You have to go to Settings>iCloud, tap Delete Account, provide the password for the old ID when prompted to turn off Find My iPhone (if running iOS 7), then sign back in with the ID you wish to use. If you don't know the password for your old ID, or if it isn't accepted, go to https//appleid.apple.com, click Manage my Apple ID and sign in with your current iCloud ID. Tap edit next to the primary email account, tap Edit, change it back to your old email address and save the change. Then edit the name of the account to change it back to your old email address. You can now use your current password to turn off Find My iPhone on your device, even though it prompts you for the password for your old account ID. Then go to Settings>iCloud, tap Delete Account and choose Delete from My iDevice when prompted (your iCloud data will still be in iCloud). Next, go back to https//appleid.apple.com and change your primary email address and iCloud ID name back to the way it was. Now you can go to Settings>iCloud and sign in with your current iCloud ID and password.
-
I used my daughter's itunes id to log into icloud as I forgot my information. Now I have established my account information and want to remove hers to add mine. I am afraid to "delete account" as I fear it will delete her information. How do I change the icloud account?
Go to iTunes menu, STORE and sign out. Then you can sign in from there or create a new account which should match the account you have on your iPad and iPhone.
Maybe you are looking for
-
Forcing usage of HTTP/1.0 (EPG & Oracle 11g)
Hi all, We've installed APEX 4 w/ EPG on Oracle 11g Database. End users use a squid proxy, which convert any HTTP request using HTTP/1.0. The problem is: when users attend to display a page in the application they have to wait 60 seconds before getti
-
Anytime I open FF a little box opens w/ a 2 in it?
I open FF a very little box with a the number 2 and a ok button opens the screen grays out you have to click ok to move on once you switch pages the box comes back and you have to click it again. This appears on any page I'm on this started today, I
-
Maybe earlier than o8 cause it is white.
-
Customers updating their own sales forecast
Hi, Are you aware of any scenario, where I can have the customers entering their sales forecast in the BW System. Any clues? Thanks, Harish
-
Hi, Anyone here have gone down the path of using SEQNR on infotype 0008? Is it possible to do so? For example, a person transfering from LA to London received a position promotion increase, cost of living adjustment, and internal equity adjustment. T