Remote Get-Service as Normal user require other privileges

Hello,
I my setup I have two Windows 2012 R2 servers.
From Computer1 I do a enter-pssession  to Computer2 as a normal user. (The user is in the group Remote Management Users)
On Computer2 I can do a get-process and it works. If I do a get-service it does not work.
Could this be because get-service automatically adds -computer . ? and it's then a double-hop?
So is there a trick to get it to work as a normal user?
Cannot open Service Control Manager on computer '.'. This operation might require other privileges.
    + CategoryInfo          : NotSpecified: (:) [Get-Service], InvalidOperationException
    + FullyQualifiedErrorId : System.InvalidOperationException,Microsoft.PowerShell.Commands.GetServiceCommand

Hi RFalken,
I also think this should be permission issue, Please also use wmi remote access service:
Get-WmiObject -Class WIN32_service -ComputerName computer2
I think you would also get "access denied" error.
I tested the script you posted, and got the same error with you, after my investigation, please follow these steps:
To solve the wmi class permission issue, please also go through this article to troubleshoot:
Permissions to access WMI remotely
1)Add the user to 'Distributed DCOM Users' group on the target server
2)Add domain test user to  "WinRMRemoteWMIUsers__"
3)Grant both "Enable Account" & "Remote Enable" access to  Root/CIMV2 namespace
Please also run the cmd below, which will edit a service's security descriptor.
4)Run "sc sdset SCMANAGER D:(A;;CCLCRPRC;;;AU)(A;;CCLCRPWPRC;;;SY)(A;;KA;;;BA)S:(AU;FA;KA;;;WD)(AU;OIIOFA;GA;;;WD)" in cmd.
Refer to:
Non-administrators cannot remotely access the Service Control Manager after you install Windows Server 2003 Service Pack 1
Although the article above is applied to Server 2003, however, it can also work in my test with newer OS version.
If there is anything else regarding this issue, please feel free to post back.
If you have any feedback on our support, please click here.
Best Regards,
Anna Wang
TechNet Community Support
Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Support, contact
[email protected]

Similar Messages

  • User requires ADMIN privilege to perform this operation.

    Hi
    I have written a procedure which creates a new workspace. The owner of the package has been granted apex_administrator_role. This works fine with SQL Developer/Plus.
    But when I try to use this procedure from my Apex page I get User requires ADMIN privilege to perform this operation.
    I understand that Apex makes a connection with APEX_PUBLIC_USER, and this can be one of the reasons of the error. But I would like to know if there is some solution:
    My code is:
          apex_instance_admin.add_workspace (
            p_workspace          => p_name,
            p_primary_schema     => p_name,
            p_additional_schemas => '');
      --p_name is passed as a parameter and workspace and primary_schema name are the sameHabib

    I think you will need to grant privleges to apex_instance_admin directly to the owner of the package.
    http://docs.oracle.com/cd/E14072_01/network.112/e10574/authorization.htm#BABFJEGJ
    The privileges of the procedure's definer must be granted directly to the user, not granted through roles.

  • Running Update Service as normal user in Windows 7

    Hi.
    I have a number of users that have Xperia 10 and Xperia 10 mini mobilephones, and these users want to be able to update there phones using the application "Update Service". Is it possible to run this application without having local administrator priveliges?
    Best regards,
    Johan Christensson

    Well, when the user tryes to start the application, they get "UAC" message asking them for elevated priveliges. I haven't checked it my self but accordning to one of the users there own credentials dosen't work/cut it.
    Best regards,
    Johan Christensson

  • How to get jobs from one user to other user

    In Dev there are two local repository users are existed.suddenly user1 has problem to loginto designer and showing error as “cannot initialize application.(BODI-1270039)'.but able to log into designer with user2.Now i would like to get existing jobs in user1 to user2.Is there anyway to get jobs.please help
    Regards,
    Krishna

    Hi Krishna,
    We cannot create a user in SAP Data Services Management Console.
    If you have access to SAP BusinessObjects BI platform Central Management Console.
    Navigate to Data Services  there by selecting Configure Repository (Provide user1 repository details). By providing a new name.
    After configuring successfully. Login to SAP Data Services Designer with new user.
    Where you can access all the user1 jobs in user1_new in your scenario. 
    Best Regards,
    Akhileshkiran.

  • Error occured while performing the operation : Cannot open Service Control Manager on computer FOO. This operation might require other privileges.

    My company is splitting in two, so we're migrating half of our systems and servers to a new domain. I have an application that uses AppFabric. We have 3 Windows servers running AppFabric, each talking to a SQL server for the AppFabric cluster service.
    On the initial domain, everything was working fine. AppFabric service is running under a service account we'll call DOMAIN1\svc_acct that is the dbo on the AppFabric database. The service account is a local admin on all the boxes. Permissions are all working
    fine.
    I've migrating the servers to the new domain and it won't work anymore.
    Now I'm using DOMAIN2\svc_acct that is the dbo on the database again. The exact same app servers have moved to the new domain and once again that service account is a local admin on all the boxes. But AppFabric won't work. I migrated the boxes back to the initial
    domain and it worked again. I migrated it back to the new domain, and it won't work.
    I'm under a time crunch to get this working for the company split. Any help would be greatly appreciated!
    Thanks!

    Lowering UAC is not always the best approach.
    It sounds like you could run the installation elevated by right clicking setup and selecting Run as administrator.
    Jason Warren
    habaneroconsulting.com/Insights
    @jaspnwarren

  • Remote Desktop Services Role on a Virtual Machine (VM) Requirements

    Does MS recommend installing RDS Role on Hardware or Virtual Machine? I have a use case where I have about 35 people that will be using the Internet Explorer and possibly run additional piece of software. I'm having trouble determining if the RDS Role on
    Virtual Machine will be able to sustain the load of so many users. Should the same performance metric used in hardware selection be appropriate to apply for Virtual Machines. We are using VMware on pretty powerful DELL hardware, which is also hosting
    120 existing VMs as of now. So my questions is would VM with 4 CPU's, 8GB of RAM, 80 GB Virtual Disk and 1 GBPs NIC would be handle the job?

    Hi,
    Thank you for posting in Windows Server Forum.
    There is no any particular requirement to run RDS on physical or virtual machine. But if you want to install RD Virtulization role then you need to see that Hyper- V role installed because “when the RD Virtualization Host role service is installed, Server
    Manager checks to see if Hyper-V is installed. If Hyper-V is not installed, Server Manager will install it”. And Hyper-V role cannot be installed on virtual machine so for that you need to install on Physical machine. Other all RDS role can be installed
    on virtual machine also.
    Install the Remote Desktop Virtualization Host Role Service
    In addition, please check below articles.
    1. Remote Desktop Services: Server and client requirements
    2. RDS Hardware Sizing and Capacity Planning Guidance.
    Hope it helps!
    Thanks,
    Dharmesh

  • User profile vs Remote Desktop Services Profile

    On a Windows 2008 R2 Domain Controller, if you open properties of an user account, you'd see
    a Profile Tab as well as Remote Desktop Services Profile Tab.
    I found this very confusing, can any one tell be the key difference between those 2?
    If I don't specify Remote Desktop Services Profile path, when I logon to Remote Desktop Server, it seems take user's
    romaing profile.
    Anyway, please advice.
    Thank you.

    Hi,
    Thank you for posting in Windows Server Forum.
    The profile tab of the user properties window allows you to configure user profile, logon scripts and home folder details for the user object. It is very useful when you have to allow your user access the same environment and data irrespective of the machine
    he logs in from.
    Active Directory User properties – Profile tab
    Remote Desktop Services User Properties
    You can specify a Remote Desktop Services-specific profile path and home folder for a user connecting to an RD Session Host server. This profile and home folder will only be used for Remote Desktop Services sessions. You should assign a separate profile for
    Remote Desktop Services sessions because many of the common options that are stored in profiles, such as screen savers and animated menu affects, are not desirable when using Remote Desktop Services.
    Manage User Profiles for Remote Desktop Services
    http://technet.microsoft.com/en-us/library/cc742820.aspx
    User Profiles on Windows Server 2008 R2 Remote Desktop Services
    http://blogs.msdn.com/b/rds/archive/2009/06/02/user-profiles-on-windows-server-2008-r2-remote-desktop-services.aspx
    Hope it helps!
    Thanks.
    Dharmesh Solanki

  • How to create a new bundle of service and import it as normal user.

    Hi,
    I have created a service.
    Now am able to import and enable the service.
    I have placed my xml file under
    /var/svc/manifest/site
    The service name is
    <service
    name='site/newservice'
    I have imported the service as root user.
    <exec_method type='method' name='start' exec='/tmp/new/method/newservice start' timeout_seconds='30' />
    This service is not able to execute the operation which I have mentioned above. The following error is thrown in log file.
    Error: User 'root' is not the owner of '/tmp/new/method'
    So I tried to import the service as normal user, the following error is thrown.
    svccfg import /var/svc/manifest/site/newservice.xml
    svccfg: Could not create temporary service "TEMP/site/newservice" (permission de nied).
    svccfg: Import of /var/svc/manifest/site/newservice.xml failed. Progress:
    svccfg: Service "site/newservice": not reached.
    svccfg: Instance "newservice": not reached.
    Please help me to solve this issue.
    I thought instead of placing the service in default location,Why cant we create a new service of bundle and place the service there.
    Please help to solve this issue by suggesting some solution or how to create a new bundle of service and import it as normal user.
    Regards,
    Kalai

    kalaiyarasan_P wrote:
    Hi,
    I have created a service.
    Now am able to import and enable the service.
    I have placed my xml file under
    /var/svc/manifest/site
    The service name is
    <service
    name='site/newservice'
    I have imported the service as root user.Okay.
    <exec_method type='method' name='start' exec='/tmp/new/method/newservice start' timeout_seconds='30' />
    This service is not able to execute the operation which I have mentioned above. The following error is thrown in log file.
    Error: User 'root' is not the owner of '/tmp/new/method'By default, services run as the 'root' user. It's complaining that the method isn't also root.
    So I tried to import the service as normal user, the following error is thrown.You won't be able to do that easily. The user that does the import is almost always root. But wihin the manifest you could have it run as a different user.
    I thought instead of placing the service in default location,Why cant we create a new service of bundle and place the service there.
    Please help to solve this issue by suggesting some solution or how to create a new bundle of service and import it as normal user.You don't need to import this as a normal user, do you? You just want it to run as one, right?
    Darren

  • This installer requires admin privileges to run

    I'm trying to install a new Application (ViaCAD 2D/3D). I get the message "This installer requires admin privileges to run" with no option to enter admin password.
    Thing is, I am clearly the Admin user with all privs.
    Searched a lot of forums and tried a lot of ideas... but to no avail. Prior installations proceeded without error. Of course, the manufacturer support simply blamed Apple and closed the support question. Console log shows no errors.
    This one has me totally stumped (and I have 20+ years admin experience).

    Update:
    The application installed on another system running 10.4. On the offending system, I tried another Admin account, ran repair permissions from Utilities, made sure Admin had R/W privs on Apps folder, moving the .dmg file to the Applications folder, did a reboot, searched for a VidCad plist file. Out of ideas.

  • User has no privileges on the APEX_040200 schema.

    Recently upgraded to APEX 4.2, when installing a package application I get the following error 'User has no privileges on the APEX_040200 schema."
    Has anyone encounter this error?
    Thank you,
    Ivan

    Are you installing it through the application builder or through sqlplus?

  • Automatic Adobe Update for users without admin privileges

    Hi there,
    I have a PC with Windows 7 Professional (32bits) and Adobe Reader (9.4.6)
    I have selected "Automatically install updates" in Preferences --> Updater:
    The problem is: when a normal user (without admin privileges) is using the system, it turns up an Adobe Box which asks the user to install the Update:
    But when the user tries to update, it asks to insert the admin password.
    How can I solve this? I would like Adobe Reader updates to be downloaded and automatically installed for users in my PC without admin privileges. Is this possible?
    Thanks in advance.
    Best regards,
    Pablo

    Anyone have any further insight into this?  Is there a way to simply give the user admin creds but only for Adobe Reader that would permit users to do thier own updates?
    I don't want to have to constantly update the MSI I am deploying with GP/LUP if possible.
    I am, however simply looking to update 11.0.0 to 11.0.1 ,11.0.2....etc without having to touch GP/LUP/each end user machine

  • Can't log on with administrator user by finding the message "The task you are trying to do can't be completed because Remote Desktop Services is currently busy. Please try again in a few minutes. Other users should still be able to log on.

    Hi,
    Now, my Windows 2008 R2 Enterprise server are running in the domain. It have problem about some one in my team have remote my server with the user administrator while I'm remote it now. It make my session loss. I tried to remote it again but I found
    the message at the log on screen about "The task you are trying to do can't be completed because Remote Desktop Services is currently busy. Please try again in a few minutes. Other users should still be able to log on."
    Now, nobody can't remote with administrator user into this server. I have check the application log. I found the error message like this.
    ++++++++++++++++++++++++++++
    Source: Desktop Window Manager
    Event ID: 9003
    Detail: None The Desktop Window Manager was unable to start because a composited theme is not in use
    ++++++++++++++++++++++++++++
    Source: Microsoft-Windows-Winsrv
    Event ID:10002 
    Detail: The following application was terminated because it was hung: mmc.exe.
    ++++++++++++++++++++++++++++
    Source: Microsoft-Windows-Winsrv
    Event ID:10002 
    Detail: The following application was terminated because it was hung: javaw.exe.
    ++++++++++++++++++++++++++++
    Source: Microsoft-Windows-Winsrv
    Event ID:10002 
    Detail: The following application was terminated because it was hung: Explorer.exe.
    ++++++++++++++++++++++++++++
    Source:Desktop Window Manager
    Event ID:9009
    Detail:The Desktop Window Manager has exited with code (0x40010004)
     ++++++++++++++++++++++++++++
    Source:Microsoft-Windows-Winlogon
    Event ID:6005
    Detail:The winlogon notification subscriber <Sens> is taking long time to handle the notification event (Logoff).
    ++++++++++++++++++++++++++++
    In addition, I can log on this server with other user but I can't log off by it's showing the message "please wait for the system Event Notification service". Normally, the problem can solve by reboot the server. But how can be solve this problem
    by we do not reboot the server?

    Hi,
    The cause of unable to remote back to the server seems to be services hung, please try to reset session as the article below guides to see if it works:
    Windows Server: Remote Desktop Error: The task you are trying to do can't be completed because Remote Desktop Services is currently busy
    http://social.technet.microsoft.com/wiki/contents/articles/28636.windows-server-remote-desktop-error-the-task-you-are-trying-to-do-can-t-be-completed-because-remote-desktop-services-is-currently-busy.aspx
    If the issue can always be re-produced, then I would suggest you fully patch the system.
    More information for you:
    The task you are trying to do can't be completed because Remote Desktop Services is currently busy. Please try again in a few minutes. Other users should still be able to log on
    https://social.technet.microsoft.com/Forums/windows/en-US/c58bfbd5-1d63-47e3-a489-6d8c8778b76b/the-task-you-are-trying-to-do-cant-be-completed-because-remote-desktop-services-is-currently-busy?forum=winserverTS
    Best Regards,
    Amy
    Please remember to mark the replies as answers if they help and un-mark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact [email protected]

  • How to get User Profile Service information on user OTHER THAN current user?

    So much information on how to autopopulate information for the current user or the logged in user in InfoPath.  But what about other users?  What if there's a field that's 99/100 times going to be the same person, but it's not the person that's
    logged in? 
    I would like not just to autopopulate a person field to be a specific user (which is not the current user), but I'd also like to autopopulate surrounding fields for that user's Title and Department. 
    For instance, consider the following 6 fields.
    1. Current User Name:  
    2. Current User Title:  
    3. Current User Department:
    4. Current User’s Supervisor’s Name:  
    5. Current User’s Supervisor’s Title:  
    6. Current User’s Supervisor’s Department:
    I know how to get the first three; the internet is swarming with that information.
    I'm struggling the last three; searching for this information is impossible without turning up information on current user instead.
    The furthest I've gotten so far is to autopopulate Current User's Supervisor's Name by:
     1. Show Advanced View on Fields pane
     2. Expand my Field (which is really a group) called IT Manager Name
     3. Expand what shows up under that which is pc:Person
     4. Right click AccountId and choose Properties
     5. Set Default value to [our domain]\[IT Manager's ads username]
    This solves how to get that 4th field my example list above Current User's Supervisor's Name to autopopulate, but how do I then get the Title and Department from the value I set in step 5 [our domain]\[IT Manager's ads username]?  Or is there a different/better
    way altogether to go about getting a non-current user's info to autopopulate in InfoPath form fields?
    *UPDATE*
    I just want to clarify that I'm not asking if there's a way to autopopulate the current user's supervisor.  I'm aware that Manager is one of the User Profile service fields.  But the point is that  I want to have a field in which the current
    user fills in a username (different than his or her own), and to have User Profile Service called on that provided username to autopopulate Title and Department in surrounding fields.  The question is about how to call information with User Profile Service
    on any provided username, specifically what steps to take to set this up in InfoPath Designer.

    Have a look at the REST API. You can use the /_api/sp.userprofiles.peoplemanager/getpropertiesfor endpoint to query the user profile service for user profile properties of any user. 
    The API is documented here: https://msdn.microsoft.com/en-us/library/office/dn790354.aspx and here https://msdn.microsoft.com/en-us/library/office/jj163800.aspx
    Regards, Matthew
    MCPD | MCITP
    My Blog
    View
    Matthew Yarlett's profile
    See my webpart on the TechNet Gallery that allows administrative users to upload, crop and format user profile photos. Check it out here:
    Upload and Crop User Profile Photos

  • How do I remote control a user in remote desktop services in Windows Server 2012?

    Hello,
    we currently operate in a 2008 R2 environment with the majority of clients connecting to our terminal servers.  We use the remote control feature in terminal services manager to connect to a users session when a user phones our helpdesk with
    a question / issue.
    Just today I've installed 2012 server on a hyper-v virtual machine to have a play with it.  I've installed the Remote Desktop Services and noticed this remote control feature is gone.  I can still log off or send a message to a user, but I can
    no longer remote control their session.
    I've seen one or two other posts stating this feature has been removed completely.
    So, a couple of questions:
    1. How on earth do I "shadow" or connect to a users session now?
    2. If I have to go third party to get this functionality back, what's the best software on the market for this and does it support remote connecting of users who have their RDP session span multiple monitors? (2008 R2 doesn't)
    3. Will Microsoft ever bring this feature back? as at this stage I doubt we would move to 2012.  This is the one feature that is crucial to the day-to-day running of our helpdesk.
    Cheers.

    A large percentage of our IT support business is through remote management. Most of our large enterprise customers are Terminal Server environment (now called Remote Desktop - why does Microsoft have to change EVERYTHING - how would they feel if I changed
    the colour of the sky from blue to red just because I could?).
    Last week, after much expense to the customer (and realising that there WOULD be some cosmetic headaches to contend with Server Management) we installed a new "Remote Desktop Server" for them and shifting them from 2003 - a big leap so we discovered.
    During deployment it came as a HORRIFIC surprise that we could not remote control user's sessions!
    Yes, we ARE to blame for not fully realising the cock-up Microsoft has made for us. We should have fully researched every detail of what changes they made and what they have robbed us of.
    Firstly, the removal of the ability to fully manage user's sessions came as a HUGE blow!
    The remaining multiple issues that followed (including the hugely cumbersome and SLOW way of accessing user's sessions and the false information that the console was reporting users logged in when they had already logged out) suddenly resulted in us decommissioning
    the new 2012 installation in favour of a 2008 R2 installation.
    Some may ask; Why not use "Third Party" apps to counteract the issue? Firstly; why spend MORE and why use a third party app that "is as" cumbersome to use just because of a freaking feature that Microsoft deemed a "security risk" - for G.D sake!
    We have now been directed by management to convince customers that a move to 2012 is NOT recommended - good choice boss, I love you!
    The question is; will Microsoft re-implement this feature and fix Server Management performance/accessibility in a future release before 2008 R2 is no longer available? Probably not - it looks like their stubbornness to forge ahead with their craze mind-set
    of transforming their products into something that is now annoying millions (including their bloody push towards everything-cloud which NONE of our customers want anything to do with).
    Microsoft! Get us back on to your side and take a step back, take a deep breath and listen to consumers!

  • TS4268 iPhone users can no longer send me text messages now that i've moved to a non-iOS phone. Can iMessage service or Message users be refreshed to see me as a normal text message recipient?

    iPhone users can no longer send me text messages now that i've moved to a non-iOS phone. Can iMessage service or Message users be refreshed to see me as a normal text message recipient?
    I still have an iPhone, but haven't turned it on for weeks. And there's no SIM in it, so no cell service, just WiFi.  When I turn it on after a prolonged period of having it off (weeks), a bunch of messages popup that should have been forwarded to my new phone (same phone number and carrier as when I was an iPhone user) but appear to sit in iMessage queue indefinitely instead.
    I'm guessing it has to do with the link that's made when an iPhone first realizes that it's talking to another iPhone and defaults, for all future texts, to iMessage.  You know, the green to blue switch.  How does that association get undone?
    Has anyone else seen this, and if so, is there a fix?

    your number can remain on the imessage server for some time

Maybe you are looking for

  • How to trigger a form based on object type and process type

    Hi all, I am new into SRM.. I have been asked to develop a form by cloning an existing standard form.. Using bbp_output_change_sf badi you can trigger the form by passing the object type but the scenario is such that depending on the object type and

  • My ipod does not appear in device list

    iTunes does not recognize my iPod Touch. It does not appear as a "device". What does appear is "Sync George Lance's iPod". There is no problem syncing but can't manage the iPod. I have gone through the un-installing and re-installs of all of the Appl

  • Sign Once (Signature Pad) & Copy Signature Image Many?

    Does anyone know how to sign a document once with a signature pad (or with a signature image applied to a digital signature,we suppose) and then attempted to copy the signature image into other image objects in the form?  We're assembling large sets

  • How to move indexes to another tablespace through script

    Hi Dear, How i can move indexes to another tablespace through a script which just gets new tablespace name, owner name and move and rebuild indexes in one go. Thank u for your prompt Help. Regards

  • Can't find my hard disk

    Hello Accidentally i dragged the hard disk icon in the finder and dropped it in the screen, and it just poffed away. Now I can't find it and nether my Time Machine does, can someone help me? Best regards Frankensten