Providing SAAS using RDP with Administrator Access Token

Hello, I am having this idea of providing Software As A Service to my clients using RDP. The main issue is to protect the software from copy
I am planning to run the software in client's RDP session using "Run As Administrator" method. Is there is a security concerns against clients/users connected by RDP to gain access to the Admin token I am creating for them to use my software? And
eventually perform Admin level actions on the machine? of course I am planning to prevent the software I am developing from running any other process.

Hello Amy,
Thanks for the reply. It is quite helpful. For your question my idea is to use the "RUN AS” command from within client's session.
Your solution is very appropriate but in my case it should be from "<UserAccount> Properties: Environment Tab " mentioned in the second article.
I did try it but nothing happened. The user get a normal login with a desktop even it is mentioned, in the Environment Tab's help, that only the specific program will be executed.
I think the problem is the server is not configured with "Remote Desktop Server Role". I did that configuration but I cannot restart the machine until
Saturday. Hope it will work out!! Also, I still don’t know with what kind of credentials the specific software will run upon client's login.
Kindest regards,
Rami

Similar Messages

Cannot print using RDP, with a custom page size ,on HP Laserjet M1217nfw MFP

Dear Team,
i have on the server win 2008 R2 standard , i have installed the drivers of HP Laserjet M1217nfw MFP printer ,
on the client i have win pro 7 SP1.
i need to print through RDP the documents generated in my application which i access remotely using RDP.
i know the printer drivers are installed on client and server both.
the issue is of creation of custom pages to print the document in proper format so that it prints in the client PC with proper formatting.
we are currently successfully printing on HP Laserjet P3015 printer but at a different location. and i have 5 branches still to be able to print this document from the application,
I need you advise and assistance as to how do i go about achieving my objective with this printer,
Thanking you in advance
regards
Vibes

Hello JBC666,
I understand that you are having an issue with printing wireless from your M1217nfw. I can understand how frustrating this can be. I would like to confirm a couple of things with you to get better understanding of your setup.
1) How far away from the printer is the router?
2) Has there been an recent changes that could have caused the issue?
As well printing a network test report, is an excellent option to find out if there is any issues with the connection at all. I have included the following steps to print the test.
1) Press the wrench button
2) Press the right arrow until you see Network Config
3) Press Ok
4) Press the right arrow until you see Network Test
5) Press Ok
1) Does anything fail on this test?
2) What is the signal quality?
3) Are you able to view the printers embedded web server?
   Steps to accessing the embedded web server
   1) Open up your internet browser
   2) Type the IP address (from the test report) into the address bar
   3) Press Enter
Thank you.
I worked on behalf of HP

Log In to Windows 8 by RDP with Assigned Access User

I've set up a user account called Kiosk that has Google Chrome as it's assigned app and seems to work fine when I log on locally. However, when trying to connect to the machine by RDP with the Kiosk user it logs in and immediately logs out without showing
Google Chrome or the desktop. There are no errors in the Application or Security logs, just the Logon and Log Off events.
How can I set this user to stay connected?
Thanks

Hi Luke,
First, please make sure that this user has been added to the Remote Desktop Users.
Here is the screenshot of my lab:
If it doesn't work, please check the event log to find why the user is rejected. The location of the RDP log is: Application and Services Logs --> Microsoft --> Windows --> TerminalServices
Best Regards.
Steven Lee Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Support, contact [email protected]

Using DataSource with MS Access

is it possible to use the JDBC DataSource with MS Access? Should I download some .class to register with JNDI?

I've done it with Tomcat, but I've never tried to do it outside of a container. You sound like you want to do it without a servlet or J2EE app server engine acting as the lookup and pool. - MOD

Using RowSet with MS Access

sun.jdbc.rowset.JdbcRowSet doesn't work with MS Access ?
It raises java.sql.SQLException: Invalid Cursor Type: 1003, 0, null
sun.jdbc.rowset.CachedRowSet doesn't work either:
How can I use JdbcRowSet or CachedRowSet with MS Access ?
try {
Class.forName("sun.jdbc.odbc.JdbcOdbcDriver");
// initialize our RowSet
JdbcRowSet titleRs = new JdbcRowSet();
titleRs.setUrl("jdbc:odbc:Test-Adressen"); // example DSN
titleRs.setCommand("SELECT id, title from Titles");
titleRs.execute();
//next line throws Exception :
titleRs.moveToInsertRow();//move to construct an insert row
titleRs.updateString(2, "Dipl.-Ing.");// initialize phone
titleRs.insertRow(); // insert the row
titleRs.moveToCurrentRow(); // move back to
// previous cursor position
titleRs.next();
catch (SQLException se) {
System.out.println( se+", "+se.getErrorCode()+", "+se.getSQLState());
se.printStackTrace();
catch (Throwable t) {
System.out.println( t);
t.printStackTrace();
Output:
java.sql.SQLException: Invalid Cursor Type: 1003, 0, null
JdbcRowSet (setTypeMap): null
JdbcRowSet (setMaxFieldSize): [Microsoft][ODBC Microsoft Access Driver]Optionales Feature wurde nicht implementiert.
JdbcRowSet (setQueryTimeout): [Microsoft][ODBC Microsoft Access Driver]Optionales Feature wurde nicht implementiert.
java.sql.SQLException: Invalid Cursor Type: 1003
at sun.jdbc.odbc.JdbcOdbcResultSet.moveToInsertRow(JdbcOdbcResultSet.java:4143)
at sun.jdbc.rowset.JdbcRowSet.moveToInsertRow(JdbcRowSet.java:2658)
at de.CoSoCo.relations.Title.main(Title.java:72)
note on error message : using german version of MS Access
please answer also to [email protected]

Hi Ulf,
also der Fehler kommt mir irgendwie bekannt vor. :) Ich muss mal schauen, wie ich den umschifft habe. Aber es liegt wohl eben auch an Access das Cursor Manipulation nicht geht. Wenn ich den Sourcecode gefunden habe mail ich ihn Dir.
Cu
Olaf

Using BC4J with MS Access/MySQL

Hi,
I have to develop a small application for PC consisting of somes input forms and a data report (for screen & printer). I'm new to the BC4J framework and I don't have any experiencie with it.
I will work with one of this DB: MS Access or MySQL (SQL 92 compliant).
Before beginning my work I would want to know if somebody has any experience on using the framework with one of these databases. If so, does the framework work well with these databases? Is there some known problem or limitation? Has anybody some remendation on this matter?
Thank you so much.
M Laura.

Although we don't formally test with MySQL,
we have an inhouse project that uses
BC4J with MySQL - it works well.
The only way into Access is via the JDBC:ODBC bridge,
which I've always found troublesome.
regards, Karl McHorton (bc4j development)

Using form with mssql,access and oracle9i

Is it a good idea to use forms 9i with mssql,access and oracle 9i as back end
meaning using forms6i/9i as front end
what happens with datatype defined in mssql tables
like smallint etc
SEJ

Yes, I have read it. Good information, and it has gotten me close. If I follow what it says, I can get directly into insert mode ... however, update and delete buttons still exist.
Here are the exacts in my situation:
1) created a dynamic page that creates a link generated from the function 'Portal30.wwv_user_utilities.get_url('my_application.my_link','parameter_name','parameter_value');'. Notice no relational operator.
2) created a form that is based upon table 'b'. The value passed to this form by step 1 is a foreign key from table 'a'.
3) created a link object that references form identified in step 2.
By clicking on the link generated by the dynamic page (with a parameter set and no conditional operators set), we go to the form in insert mode but we see all buttons. After your last note I decided to try a new, fresh, Portal generated form based upon table 'b', making the primary key and the foreign key hidden. I modified the link to reference this new form. By clicking the link, I go to the form in insert mode, but ALL buttons are showing, including query, next, and previous, even though some of these buttons are invalid.
I am using 3.07.? We are in the middle of installing 3.08 or 3.09, whichever we can get running first. My dba is out for the week, so I will not be able to upgrade until next week.
Any thoughts you have would be helpful. I am on the verge of creating 2 forms, but I don't want the code duplication if I can help it.
Once again, thanks in advance.

XMLStreamReader exception when using webservice with security access denied

Hi,
I'm using CXF webservices generated from a WSDL with SOAP document style. Under normal conditions, the client and server work fine, and can I read info back from the the server (SOAP http messages passed between both)
However, for some servers, I am using SUNs Policy Agent, which checks for an authentication token in the http header cookie before allowing access to the web service. I set up the cxf service port as follow:
Service service = Service.create(serviceName);
service.addPort(portName, SOAPBinding.SOAP11HTTP_BINDING, address);
servicePort = (IMyService)service.getPort(portName, IMyService.class);
I also add the authentication token to the http header cookie in the service's request context.
If the token is correct, everything works fine. However, if the token is incorrect, and access is denied, the policy agent does not return a SOAP http message. In this case, the web service method throws a low-level XMLStreamReader exception i.e. it can't read the SOAP message response - so I can't get the actual response from the policy agent.
Would anyone have an idea on this? Should I configure the CXF port differently, or should I try to get the policy agent to return a SOAP message even if access is denied.
There is already a browser that can access the policy agent - and this needs to be redirected if access is denied. So in effect, we need the redirect functionality for the browser, and the returned SOAP message for the application using the web service.
Any help would be greatly appreciated!
Rob

Thanks for your answer.
I eventually found a workaround for this problem.
Actually you don't need to provide an SSO cookie the first time you connect to the webgate server, you just need to provide basic credentials and the webgate will provide you an SSO cookie that you can use for the next call.
The problem is that this doesn't work out of the box with the .NET/WSDL framework for some reason (with Java + the HTTPClient library I had no problem).
I had to had manually the following headers to the HTTP request to make it work:
Authentication: Basic XXXXXXXX
Cookie: OBBasicAuth=fromDialog
Where XXXXXXXX is a base64 encoded string containing "login:password"
Thanks,
Franck

Unable to use JProfiler with SUN Access Manager (in Weblogic Server)

Whe I was trying to profiling with JProfiler , I am getting the following exception during the Weblogic startup:
<Dec 12, 2005 6:30:49 PM IST> <Warning> <HTTP> <BEA-101247> <Application: '/opt/SUNWam', Module: 'amcommon': Public ID references the old version of the Servlet DTD. You must change the public ID in web.xml file to "-//Sun Microsystems, Inc.//DTD Web Application 2.3//EN".>
Dec 12, 2005 6:30:54 PM com.sun.xml.rpc.server.http.JAXRPCContextListener contextInitialized
INFO: JAXRPCSERVLET12: JAX-RPC context listener initializing
<Dec 12, 2005 6:30:56 PM IST> <Warning> <Net> <BEA-000905> <Could not open connection with host: ctsblrsun14.gmacfs.com and port: 8001.>
<Dec 12, 2005 6:30:56 PM IST> <Warning> <Net> <BEA-000905> <Could not open connection with host: ctsblrsun14.gmacfs.com and port: 8001.>
<Dec 12, 2005 6:30:56 PM IST> <Warning> <Net> <BEA-000905> <Could not open connection with host: ctsblrsun14.gmacfs.com and port: 8001.>
<Dec 12, 2005 6:30:56 PM IST> <Warning> <Net> <BEA-000905> <Could not open connection with host: ctsblrsun14.gmacfs.com and port: 8001.>
<Dec 12, 2005 6:30:57 PM IST> <Error> <HTTP> <BEA-101216> <Servlet: "LoginLogoutMapping" failed to preload on startup in Web application: "amserver".
javax.servlet.ServletException
at weblogic.servlet.internal.ServletStubImpl.createServlet(ServletStubImpl.java:919)
at weblogic.servlet.internal.ServletStubImpl.createInstances(ServletStubImpl.java:883)
at weblogic.servlet.internal.ServletStubImpl.prepareServlet(ServletStubImpl.java:822)
at weblogic.servlet.internal.WebAppServletContext.preloadServlet(WebAppServletContext.java:3335)
at weblogic.servlet.internal.WebAppServletContext.preloadServlets(WebAppServletContext.java:3292)
at weblogic.servlet.internal.WebAppServletContext.preloadServlets(WebAppServletContext.java:3278)
at weblogic.servlet.internal.WebAppServletContext.preloadResources(WebAppServletContext.java:3261)
at weblogic.servlet.internal.WebAppServletContext.setStarted(WebAppServletContext.java:5951)
at weblogic.servlet.internal.WebAppModule.start(WebAppModule.java:862)
at weblogic.j2ee.J2EEApplicationContainer.start(J2EEApplicationContainer.java:2127)
at weblogic.j2ee.J2EEApplicationContainer.activate(J2EEApplicationContainer.java:2168)
at weblogic.j2ee.J2EEApplicationContainer.activate(J2EEApplicationContainer.java:2115)
at weblogic.management.deploy.slave.SlaveDeployer$Application.setActivation(SlaveDeployer.java:3082)
at weblogic.management.deploy.slave.SlaveDeployer.setActivationStateForAllApplications(SlaveDeployer.java:1751)
at weblogic.management.deploy.slave.SlaveDeployer.resume(SlaveDeployer.java:359)
at weblogic.management.deploy.DeploymentManagerServerLifeCycleImpl.resume(DeploymentManagerServerLifeCycleImpl.java:229)
at weblogic.t3.srvr.SubsystemManager.resume(SubsystemManager.java:131)
at weblogic.t3.srvr.T3Srvr.resume(T3Srvr.java:966)
at weblogic.t3.srvr.T3Srvr.run(T3Srvr.java:361)
at weblogic.Server.main(Server.java:32)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
at java.lang.reflect.Method.invoke(Method.java:324)
at com.jprofiler.agent.Agent$_E.run(Unknown Source)
at java.lang.Thread.run(Thread.java:534)
Caused by: java.lang.NullPointerException
at com.sun.identity.authentication.UI.LoginLogoutMapping.init(LoginLogoutMapping.java:71)
at weblogic.servlet.internal.ServletStubImpl$ServletInitAction.run(ServletStubImpl.java:1028)
at weblogic.security.acl.internal.AuthenticatedSubject.doAs(AuthenticatedSubject.java:321)
at weblogic.security.service.SecurityManager.runAs(SecurityManager.java:121)
at weblogic.servlet.internal.ServletStubImpl.createServlet(ServletStubImpl.java:904)
... 25 more
>

This is an SSL handshake problem of Websphere - has nothing to do with AM.
Websphere�s JDK does not trust the Signer / Cert of AM�s deployment container.
Either configure a truststore (or use an existing webshpere truststore) where you import the Cert of the Signing CA of your AM DC�s cert.
Other option - import the mentioned cert in cacert file of IBM JDK - but be aware that this might get lost when applying an Websphere fixpack/refreshpack.
BTW what have you configured for server.port,server.host and server.protocol in your AMConfig.properties?
If you have not changed that settings agent will use the port/protocol specified to communicate with AM.
-Bernhard

Problem with locks while using iBATIS with MS Access through JDBC-ODBC brid

Hello,
I am attempting to use iBATIS to access MS Access file via JDBC-ODBC bridge.
(I am using Spring's "SqlMapClientDaoSupport," but that is probably irrelevant)
All this runs on Tomcat... First time DB gets accessed the LDB lock file is created. From there on the only way I can remove the lock file is to kill the JVM...
Any help is greatly appreciated...

And why is that a problem?

I want to create a login form by using servlets with database validation.

Would you please provide me a code for a login form using servlets with Ms Access database validation?

No. This is not a free coding service. Your request is (a) ridiculous, (b) offensive, and (c) off-topic. Locking this thread for later deletion.

OAS 10.1.2.0.2 - How configure PHP with database access

I Installed OAS 10.1.2.0.2 on SuSe 9.3.
I put in $ORACLE_HOME/Apache/Apache/htdocs a php pages for test if this OAS versión supported php.
The test is ok, this versión support PHP, but not are configured to PHP with database access.
My question is: How I configure this OAS 10.1.2.0.2 to use PHP with database access?
I need install all PHP although my php pages is running (without database access) ??? or I only need configure database access?

How I compile my PHP with --with-oci8??

BW : RSA1 with restrict access, possible?

Hi all,
Its possible use RSA1 with restrict access ?
You can implement the transaction RSA1 restriction of access.
Example:
Some users can not use the part of source systems (TCODE RSA13).
In this example, we block the transaction RSA13, however using RSA1 itself unable to access the part of source systems.
thz

Just to add some more info to Durgesh's reply...
Using obj S_RS_ADMWB you can restrict access to different ares of AWB. See online docu on this topic:
[http://help.sap.com/saphelp_nw04/helpdata/en/80/1a6859e07211d2acb80000e829fbfe/content.htm|http://help.sap.com/saphelp_nw04/helpdata/en/80/1a6859e07211d2acb80000e829fbfe/content.htm]

Can a Time capsule be used to provide internet on a guest network but with no access to my files ?

I was recently given a brand new 3TB time capsule.
I would firstly like to partition the drive if possible ? to store films and some old photos etc
I would then like to create a private network for myself with access to the time machine back ups and the partition with my films and photos in
I Would then need to create a guest network for my house mates to use with access solely to the internet and none of my files. is this possible ?
Also, if this is not possible,would it then be possible to plug in an external hard drive to the time capsule (containing my films and old photos etc) and access these files wirelessly on my network ? but also stop my guests from accessing these files over their network ?

I would firstly like to partition the drive if possible ?
It is possible in theory, but not easy in practice, and it will void the warranty on the Time Capsule if you attempt to do this. In general, you would need to open up the Time Capsule, remove the hard drive, place the hard drive in a separate enclosure or caddy, connect it directly to your Mac, and use Disk Utility to format the drive. Then, you would need to reinstall the drive back in the Time Capsule and hope that everything works.
Instead of partitioning, you might want to take a look at setting up one or more disk images on the Time Capsule using Disk Utility. This would allow you to reserve a certain amount of space for data and set up a password that users would need to type in before they could access the data inside the disk image.
I would then like to create a private network for myself with access to the time machine back ups and the partition with my films and photos in
The default setup of the Time Capsule will allow you to create a wireless network using a name and password that you want to use.
I Would then need to create a guest network for my house mates to use with access solely to the internet and none of my files. is this possible ?
Whether or not this is possible will depend on the type of modem that you will be using with the Time Capsule. The Guest Network feature can be enabled if you will be using a simple modem with the Time Capsule. Something like this, for example:
However, the Guest Network feature was not designed to work correctly with a modem/router or gateway. Something like this, which is often furnished by Internet Service Providers to their customers:
See the difference? One is a simple modem that only provides an Internet connection to an outboard router, like the Time Capsule. The other device is a modem/router or gateway, which is really two products.....a modem and a router.....in one package. The Guest Network feature was not really designed to work with this type of product, so it may or may not work if you try to use it with this type of device. Getting to work will involve trying to bend the rules.
Also, if this is not possible,would it then be possible to plug in an external hard drive to the time capsule (containing my films and old photos etc) and access these files wirelessly on my network ? but also stop my guests from accessing these files over their network
Yes, this actually might the simplest way to accomplish what you want to do. Make sure that the drive is formatted correctly for Mac in Mac OS Extended (Journaled) using Disk Utility and then use AirPort Utility to set up a password to access the drive. Only give the password to those who you want to have access to the drive.

OWSM: Setting up SAML token verification with Novell Access manager

Hello,
We are trying to set-up communication between an OWSM gateway and a Novell Accces Manager to do the following:
All requests to our services should be secured using Web Services Security SAML Token Profile 1.0. OWSM will validate this token using the SAML – Verify WSS 1.0 Token step. The assertion will be issued by a Novell Access Manager. Are we right that OWSM needs to communicate with the Novell Access Manager for this? In that case Novell requires us to deliver metadata to establish a trust relation between the Identity Provider (Novell) and the Service Provider (OWSM). This metadata should look something like this:
odysseus:/var/opt/novell/tomcat4/webapps/nidp # cat application.xml
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE application PUBLIC '-//Sun Microsystems, Inc.//DTD J2EE Application 1.2//EN' 'http://java.sun.com/j2ee/dtds/application_1_2.dtd'>
<application>
<display-name>NIDPJ2EEApp</display-name>
<description>Novell Identity Provider</description>
<module>
<web>
<web-uri>nidp.war</web-uri>
<context-root>nidp</context-root>
</web>
</module>
</application>
However I cannot find anything on this in the OWSM documentation.

To answer my own question. We found 4 application.xml files which seem to contain the metadata in the folders ccore, coreman, gateway and policymanager of $AS_HOME/owsm/config/.

Providing SAAS using RDP with Administrator Access Token

Similar Messages

Maybe you are looking for