Interaction between elevated PS session and non-elevated processes

Mighty all, I'm trying to leverage the following code to interact with instances of powerpoint running on a system
[Runtime.InteropServices.Marshal]::GetActiveObject('Powerpoint.Application')
All works as expected until my code gets executed in the same security context as powerpoint.
Now my problem is that as soon as this code runs from a PS session of the same user but with administrative flags - magic stops happening :(
Can anyone think of a way to keep my code running?
Thanks in advance!

Hi Alex,
Had you got any errors finally or the powershell cmdlet hung?
In addition, based on my research, If your client (calling into an instance of PowerPoint) runs with IL "medium integrity", and all office applications run with this IL, the connection to the remote instance will fail from a client running with an higher
IL, (for instance when you run as administrator).
Reference from:
PowerPoint --> Marshal.GetActiveObject("PowerPoint.Application");
If you have any feedback on our support, please click here.
Best Regards,
Anna
TechNet Community Support

Similar Messages

  • Choice between start new session and restore previous session

    I have refused to update firefox since 2.0.0.14. That's mid 2008. The reason? Because EVERY update I have seen has a critical flaw and I am sick of it never having been addressed. Oh, I have tested it many times. I am impatient in general. I have allowed it to update just now for instance with the naive hope that MAYBE you'd put it back the way it should be, and NOPE, you STILL have the critical epic fail that you introduced some time after 2.0.0.14, and I then had to uninstall firefox and reinstall my copy of 2.0.0.14 and restore my passwords and bookmarks from the key3.db and bookmarks.htm files (which also aren't compatible with the later versions, and that's bad too since it was more efficiently done and more comprehensible and more compatible with common knowledge that way, what the hell is a .json file anyway????), and I am sick of it. It's getting harder and harder to use 2.0.0.14, things constantly say snide things like 'upgrade (downgrade) to a modern browser, your browser is not supported', 'you are using md5 for certificate validation, are you insane?', that sort of thing, and things often don't work right, but it is WORTH every bit of it to avoid the critical epic fail.
    Ok, enough suspense. That critical epic fail is this: when I start firefox after the previous session crashed (or was killed by the task manager), it does NOT give the NICE CHOICE 2.0.0.14 does between "begin new session" and "restore previous session". It automatically restores the previous session. Do you have any idea how many times I have gone to a webpage only to observe it is infected with a virus which it tries to put on my computer, or just a horrible page with a horrible script that seems to involve an infinite loop or at least something incredibly excessive and inefficiently coded that totally eats up the CPU processing power and I BARELY managed to KILL firefox with the task manager? Do you think I want it to go right back to loading that page when I start firefox again? Do you have the BATSH*T INSANE notion that I should always WANT to restore my previous session? Well I DON'T! I killed it with good reason in the first place. 100% of the time mozilla gets killed by the task manager and 90% of the time it crashes, I don't WANT to restore my previous session. Is there some secret hidden feature representing providing this choice that 2.0.0.14 provided that is by default DISABLED that I can maybe enable, or do I have to continue using 2.0.0.14 and watch as more and more and more things refuse to work with it?
    Also, you need to have the "stop" button within reach of the bookmarks and the left side of the address bar, not on the far right of the screen. And I'd also rather not have it be in the same place as the refresh button, though I understand the justification for having the stop button become the refresh button. Is there any way I can also have the "forward, back, stop, refresh" buttons all together and in the most convenient place as they were in 2.0.0.14 while I'm at it?

    Set the pref browser.sessionstore.max_resumed_crashes to 0 on the about:config page to get the about:sessionrestore page immediately with the first restart after a crash has occurred or the Task Manager was used to close Firefox.
    *http://kb.mozillazine.org/browser.sessionstore.max_resumed_crashes
    That will allow you to deselect the tab(s) that you do not want to reopen, but will allow to reopen other tabs.
    See:
    * http://kb.mozillazine.org/Session_Restore#Restoring_a_session_after_a_crash
    * http://kb.mozillazine.org/Browser.sessionstore.max_resumed_crashes

  • Difference between a persistent messages  and non persistent messages in JM

    Hi
    This question is with respect to persistent messages , and non persistent messages .
    As per the docs it says that for persistent messages the QueueSender.send() blocks until it recivies an acknowledgement .
    Here my question is what is the difference between a persistent messages , and non persistent messages
    Thanks in advance .

    The exact behaviour depends on the JMS provider being used. But since non-persistent messages are defined to be unreliable, the provider may indeed decide that it's not necessary for the server to acknowledge the receipt of a non-durable message from a producer.
    Nigel

  • Diff Between Oracle BPM Studio and Oracle BPEL Process Manager

    1)What is the difference between Oracle BPM Studio and Oracle BPEL Process Manager?
    2)What is the connection between Oracle BPM Studio and Oracle BPEL Process Manager?

    Hi,
    As of today you should install SOA Suite 11g
    Fr this you will need to install Database (for development you can use XE)
    Run RCU utility to crete DB schemas for SOA Suite.
    Install Weblogic server
    Install SOA Suite as an option to Weblogic
    Create SOA Domain.
    It is physically possible to do it in 2GB but is far better on 3 - 4GB
    You can consider installing DB on different machine.
    Adam

  • How does QoS work with WAAS WCCP? What's the interaction between QoS Traffic Classification and WAE Traffic Application Policy?

    How does QoS work with WAAS WCCP? What's the interaction between Router QoS Traffic Classification and WAE Traffic Application Policy?

    By default, WAAS preserves the DSCP marking on intercepted packets.  There is a configuration option to set/override the DSCP value at the global (device), application, and classifier levels.  Currently WAAS provides marking only.  There is no action taken by WAAS based on the DSCP value.
    Regards,
    Zach

  • Interaction between Actionscript 2 application and Actionscript 3 application

    Hi,
                  I got a project to refectoring. Its coded in as2. As One application (TabManager) has 5-6 tabs, and loading different swfs (coded in as2) at click on different tabs. Then according to user interactions, the loaded swfs are interacting with tabmanager (main swf) file like calling functions and sending objects and tabManager swf is also interacting with its loaded swfs. In short, All swfs are interacting each other.
    Now, I have to develop two application, one is the main application "TabManager" and other one is 3rd (one application out of 5-6 applications, whose are loading in tabmanager) loaded application in tabManager.
    To make the long story short, I need to load action script 2 coded applications under a action script 3 application and need to call each other function and send object type data.
    So, please suggest the best options, One I know is LocalConnection class.
    Is there any other better way to interact between as2 and as3.

    there is no other way to communicate between as3/as2 swfs in real time.

  • Interaction between Actionscript 2 apps and Actionscript 3 app

    Hi,
                  I got a project to refectoring. Its coded in as2. As One application (TabManager) has 5-6 tabs, and loading different swfs (coded in as2) at click on different tabs. Then according to user interactions, the loaded swfs are interacting with tabmanager (main swf) file like calling functions and sending objects and tabManager swf is also interacting with its loaded swfs. In short, All swfs are interacting each other.
    Now, I have to develop two application, one is the main application "TabManager" and other one is 3rd (one application out of 5-6 applications, whose are loading in tabmanager) loaded application in tabManager.
    To make the long story short, I need to load action script 2 coded applications under a action script 3 application and need to call each other function and send object type data.
    The Actionscript 3 app is in flex.
    So, please suggest the best options, One I know is LocalConnection class.
    Is there any other better way to interact between as2 and as3.

    It will be easier to rewrite the whole lot rather than try and manage intercommunication between as2/3 in a project with a lot of interdependencies between swfs.
    If you try and continue the project, as described with a mix, you are in for a lot of pain.
    Essentially you will be writing a communications protocol for the interactions between each swf and the main AS3 project. It will be a mess.

  • What is the difference between authorisation if-authenticated and none

    Hello,
    I am working on a AAA configuration, and can't determine the practical difference between authorisation none and authorisation if-authenticated.
    I realise the obvious difference, that if TACACS is down, with none there is no authorisation if none is used; and if TACACS is down authorisation will allow all commands if if-authenticated is used.
    However, since you must always be authenticated, before authorisation commences, in practical terms, there is no difference that I can see between if-authenticated and none? Can anyone please explain if there is a practical difference between them.
    #####################Authorisation if-authenticated#############
    aaa authorization exec default group tacacs+ if-authenticated
    aaa authorization commands 1 default group tacacs+ if-authenticated
    aaa authorization commands 15 default group tacacs+ if-authenticated
    #####################Authorisation none##################
    aaa authorization exec default group tacacs+ none
    aaa authorization commands 1 default group tacacs+ none
    aaa authorization commands 15 default group tacacs+ none
    Many Thanks
    Ian Potts

    One use I can think of is where you have both AAA and local configured for exec or command authorization. Let's say TACACS+ in the following manner:
    aaa new-model
    aaa authentication login default tacacs+ local
    aaa authorization exec default tacacs+ if-authenticated
    username admin password
    If you had this configuration without the "if-authenticated" statement and the connection to the TAC+ server goes down or you receive an ERROR in communicating with it such as a mismatched key, then it goes to local for authentication. If you did not want to use local authorization and want it to succeed exec authorization for this local account, then the "if-authenticated" statement would be needed.
    Check out the debugs with:
    aaa new-model
    aaa authentication login default tacacs+ local
    aaa authorization exec default tacacs+ local
    AND the TAC+ server is down
    6d21h: AAA/AUTHOR/EXEC (4150549846): Port='tty2' list='' service=EXEC
    6d21h: AAA/AUTHOR/EXEC: (4150549846) user='admin'
    6d21h: AAA/AUTHOR/EXEC: (4150549846) send AV service=shell
    6d21h: AAA/AUTHOR/EXEC: (4150549846) send AV cmd*
    6d21h: AAA/AUTHOR/EXEC (4150549846) found list "default"
    6d21h: AAA/AUTHOR/EXEC: (4150549846) Method=TACACS+
    6d21h: AAA/AUTHOR/TAC+: (4150549846): user=admin
    6d21h: AAA/AUTHOR/TAC+: (4150549846): send AV service=shell
    6d21h: AAA/AUTHOR/TAC+: (4150549846): send AV cmd*
    core7200-4#
    6d21h: AAA/AUTHOR (4150549846): Post authorization status = ERROR
    6d21h: AAA/AUTHOR/EXEC: (4150549846) Method=NOT_SET
    6d21h: AAA/AUTHOR/EXEC: (4150549846) no methods left to try
    6d21h: AAA/AUTHOR (4150549846): Post authorization status = FAIL
    6d21h: AAA/AUTHOR/EXEC: Authorization FAILED
    NOTE, Post authorization fails because there is no method set for EXEC for the local user. Now, put in "if-authenticated" and test again:
    aaa new-model
    aaa authentication login default tacacs+ local
    aaa authorization exec default tacacs+ if-authenticated
    6d22h: AAA/AUTHOR/EXEC (2893174055): Port='tty2' list='' service=EXEC
    6d22h: AAA/AUTHOR/EXEC: (2893174055) user='admin'
    6d22h: AAA/AUTHOR/EXEC: (2893174055) send AV service=shell
    6d22h: AAA/AUTHOR/EXEC: (2893174055) send AV cmd*
    6d22h: AAA/AUTHOR/EXEC (2893174055) found list "default"
    6d22h: AAA/AUTHOR/EXEC: (2893174055) Method=TACACS+
    6d22h: AAA/AUTHOR/TAC+: (2893174055): user=admin
    6d22h: AAA/AUTHOR/TAC+: (2893174055): send AV service=shell
    6d22h: AAA/AUTHOR/TAC+: (2893174055): send AV cmd*
    6d22h: AAA/AUTHOR (2893174055): Post authorization status = ERROR
    6d22h: AAA/AUTHOR/EXEC: (2893174055) Method=IF_AUTHEN
    6d22h: AAA/AUTHOR (2893174055): Post authorization status = PASS_ADD
    6d22h: AAA/AUTHOR/EXEC: Authorization successful
    Note, the Post authorization passes because of IF_AUTHEN.
    See the behavior?
    Hope this helps.

  • How to create a relationsship between a DB Bock and Non DB Block

    Hi All,
    I am working with oracle forms 10g.
    I have created a Custom form. I have two block. One is a DB Block and another is control block(ie multi record blk).
    I tried to create a master detail relationship between these two block.
    Master block:LC_Master_BLK(DB Block).
    Detail block: LC_Detail_blk(Non DB Block).
    Form object navigator I click relation in Master Block and a pop up window opens and form there i select Detail block.
    And i give the join condition like
    LC_Master_BLK.PO_HEADER_ID=LC_Detail_blk.PO_HEADER_ID.
    I have made po_header_id as primary key in my custom table,refred in my master block.
    But it shows error as
    FRM-15004: Error while parsing the join condtion.
    Can any one tell me how to solve this.
    Thanks & Regards
    Srikkanth

    Hi Srikkanth.M
    I have two block. One is a DB Block and another is control block(ie multi record blk).this is what i call bad form design pls exchange the two blocks making ...
    Master block:LC_Master_BLK(Non DB Block).
    Detail block: LC_Detail_blk (DB Block).
    Now to link the 2 blocks then define the join condition as follows:
    :LC_Master_BLK.PO_HEADER_ID = :LC_Detail_blk.PO_HEADER_IDPls Keep in mind that the join condition specifies the relationship between items in 2 blocks db
    or
    one which is the master Non DB Block (to filter the display of data through user input to display the result output of data related in multi-records in the detail block.
    That how u can works with the relation between two blocks as urs..
    Hope this helps...
    Regards,
    Amatu Allah

  • Please recommend between Macbook pro retina and non-retina.

    I need to buy Macbook pro 13 but confused between Retina & non-retina. My main use is internet browsing, watching movies, & email (movies with mainly bluray) So what would you recommend? Does the non retina plays movies (bluray) with good quality?

    A BluRay movie is only 1920x1080 pixels at most. Any Mac display would show it just fine - the Retina display doesn't give you any advantage. As the previous poster pointed out, though, you need a BluRay player connected, and software from MacGo. It actually works pretty well in my experience.
    http://www.macblurayplayer.com/
    The Retina display is great for displaying high resolution photos, but movies are much lower resolution. Email and Internet won't benefit at all.
    Matt

  • Changes between a RAC(Objects) and NON RAC

    Hi all,
    I want to findout what all the different things to be considered when an application is made to run on RAC env.
    For eg: I found there is a difference between the way the Sequences are used in a RAC env from Non RAC.
    Are there any guidelines for the Objects used in RAC?
    Also can you point me to any doc related to tuning the interconnect as we are identifying wait events related to cluster "Cluster was consuming significant database time"
    Thanks.

    Hi hyddba,
    Absolutely, at database level for application has no changes at objects.
    At application code has changes to benefit aplications from failover TAF and FAN events.
    http://www.oracle.com/pls/db102/to_toc?pathname=rac.102%2Fb28759%2Ftoc.htm&remark=portal+%28Getting+Started%29
    Regards,
    Rodrigo Mufalani
    http://mufalani.blogspot.com

  • My experience of SSO between SAP Portal6.0 and non-Sap Application

    Firstly I announce that I am not a Sap developer or a Sap Consultant.  I am a Cognos Consultant. I need do SSO between Sap Portal and Cognos Portal in my project, So I have to make SSO between two portals.
    I  tested  SSO between the two products on IIS5 of Windows XP and IIS6 of Windows 2003 and passed.
    Step 1:  Copy sapsecin.exe and sapsecu.dll on any directory where you want, such as “C:PortalSecurity”
    Then add this  directory  to your Environment variable PATH. You can find the two files on sapserv<x> under general/misc/security/SAPSECU/<platform>;
    Step 2: Copy your Filter ISAPI Files IIS_SSO.dll or IIS6_SSO.dll in any directory where you want, such as “C:PortalFilter”. You can find this two files on SAP note 442401.
    Step 3:  Get you ‘verify.pse’  which is located in
    <irj>
    ootWEB-INFpluginsportalservicesusermanagementdata  and put it on the same directory with your ISAPI Files ,such as C:PortalFilter
    (According Sap Support articles , IIS_SSO.dll should be used on IIS 5 and IIS6_SSO should be used on IIS 6,but I can not load IIS_SSO.dll on IIS 5 of Windows XP, I use IIS6_SSO.dll );
    Step 4:  Create a new file named ‘verify.properties’ , the content of this file see the appendix A;
    Step 5:  Load the IIS6_SSO.dll on your IIS. On IIS5, Select  Website Properties—ISAPI Filter—Add IIS6_SSO.dll and name it ‘wp’ . On IIS6,do as such and Create a Web Extensions  named  ‘wp’ and allocate file IIS6_SSO.dll. Finally restart the www service.
    I
    If you can load the filter successfully, you will see the  filter color is  green.
    On IIS6,Maybe you find that you can’t load your ISAPI file IIS6_SSO.dll, Its state is unloaded and its color is red. I am confused by this question long time. I finally found you must install some R3 dll files on your system! The .dll files which I mentioned can be found in SAP note 684106, put it in a same directory with your security files, such as C:PortalSecurity and restart your web server.
    (The steps above I reference Chris beck ‘s topic)
    Step 6: I write an  ASP file named ‘headerdumper.asp’ on my website and create a i-view to show my asp file in SAP Portal. If you succeed, you can see the http header variable<your logon name> in ASP page. If you application can receive http header variables, then Congratulations! You have apply SSO successfully.
    If your log file show ‘Can't find MYSAPSSO2 ticket cookie for URI "" on host "", don’t worry about it. I am confused by this question long time though.  I found the key cause the errors are cross domain or different DNS suffix.
    I tested 3 scenarios :
    1 if your Sap Portal URL is http://sap-server:50000/irj/protal ,and your asp file is located in http://sap-server:80/headerdumper.asp, You can’t access this asp page from i-view . I am sorry that I have no idea about this.
    2 if your Sap Portal URL is http://sap-server:50000/irj/protal ,and your asp file is located in http://your-server:80/headerdumper.asp, Your log will show ‘Can't find MYSAPSSO2 ticket cookie for URI "" on host "". because they have  no domain name, which is seemed that they meant different  domain.
    3 you must deploy your asp file and sap portal like below ,So you can apply SSO correctly:
    you must access SAP Portal like : http://sap-server.domain.com:50000/irj/portal
    you must access your asp file like http://yourserver.domain.com:80/headerdumper.asp
    then add your asp file as  i-view to your SAP Portal which URL is like  above , you can get Http header variable correctly.
    I am not an native English speaker, I hope you can understand what I said.
    Appendix A The Content of Verfy.properties
    remote_user_alias=REMOTE_USER
    pse_file=C:PortalFilterverify.pse
    application=portal
    log_file=C:PortalFilterverfy.log
    log_level=3
    cache_size= 1000
    Appendix B The Code of headerdumper.asp

    I'd recommend to cross-post your inquiry to the Security

  • Interaction Between Action Script3.0 and TimeLine Objects?

    HI! i am developing a simple bowling game and new to actionscript3.0 i am facing problems
    1# I have created a movie clip out side the time line and when i add the created movie clip to the stage its x and y coordinates are different and
    2# problem is when my bowling ball hit the pins then i use if conditions and access to the time line animations like gotoAndStop("thisanim") , gotoAndPlay("thisanim") but when i use some nested conditions like if force is greater then this then gotoAndPlay("this anim") but it is not working well please guide me through that i am using it right or i am missing something that i don't know about actionscript3.0.
    I want some good Advice about this specially on interacting with Time Line using Action Script.3.0
    Thanks in Advance..
    Message was edited by: SAM FLASHER

    neither of your problems is clear.

  • How to tell the difference between DRM (fairplay) music and non-DRM music?

    Apple finally is selling non-DRM music and I've bought a couple songs in the past with ease. I like the system but I'm having a problem finding out which music is still using DRM.
    Apple originally differentiated it by charging 30 cents more for the unprotected music. Now however they removed the surcharge, but there's no way to tell if the music I'm looking at is protected.
    I choose not to buy DRMed music as I'm using my music to burn MP3 CDs for my car, and having to crack protection isn't the way I want to do it.
    How can I tell using iTunes Store which music is DRM protected, and which music is DRM free?

    Agreed, I have stopped buying from iTunes until they eliminate the restrictions, and have started replacing the songs I DID buy from iTunes with non copy protected ones from Amazon. I tell everyone not to buy from iTunes for exactly that reason. There are lots of other excellent options, which do not have the stupid restrictions that Apple has. The iPod is great, iTunes with DRM is incredibly annoying.

  • How to make interaction between select many checkbox and a database ?

    Hi ;
    i'm recently setup and start to use jdev Adf faces 11g (11.1.1.3.0), and i'm trying to use a select many checkbox component.
    i want to link this select many checkbox with the result of of a select request.
    in my data object, i created an attribute as LOV (list of value), now i do not now what's the next step ??
    i will be extremely glad if you give me an example..
    thank you in advance, and please excuse my english

    See if this helps -
    Re: Many to many in ADF BC with selectManyShuttle

Maybe you are looking for