Running 10G as a non local system account on Windows Server 2003

Hi,
I have an Oracle 10G database running on Windows Server 2003, SP2. I have created the database and it all works fine while the service is running as the default local system account. However, when I change the user that the service runs as to a different account the database starts and opens, and I can log on as SYS using a bequeath connection but I am unable to log on as any other user going through the listener. The listener responds to TNSpings, and all seems to be OK. When I switch it back to the local system user again it all works fine.
Can anyone offer any advice or help?
Thanks,
Rob

That's probably because the listener is still running as the local system account. Have you tried to change the listener service to run as the same account as the Oracle service?

Similar Messages

Requirement is to run CMD.EXE under the Local System Account. So that we can map a network drive to be used by a windows service, which will be created by command: - net use z: \\servername\sharedfolder /persistent:yes

Environment:
OS: Windows 7 32/64 bit, Windows 2008 Server 64
bit/ Windows 2012 Server 64 bit
Priority:
- Critical
Requirement: - Since
the Windows Service is running under the Local System Account, we would like to emulate this same behaviour.
Basically, we would like to run CMD.EXE under the Local System Account. So that we can map a network drive to be used by a service using following
command
net use z: \\servername\sharedfolder /persistent:yes.
Already Attempt:
We tried to launch the CMD.exe using the DOS Task Scheduler AT command. Here’s a sample command:
AT 10:36 /interactive cmd.exe
But I received a warning that “due
to security enhancements, this task will run at the time excepted but not interactively.”
It turns out that this approach will work for XP, 2000 and Server 2003 but due to session isolation
Interactive services no longer work on Windows 7, Windows Server 2008 and above.
2. We
tried to create a secondary Windows Service via the Service Control (sc.exe) which merely launches CMD.exe.
<Drive>:\sc create RunCMDAsLSA binpath= "cmd" type=own type=interact <Drive>:\sc
start RunCMDAsLSA
In this case the service fails to start and results it the following error message:
FAILED 1053: The service did not respond to the start or control request in a timely fashion.
3. One
suggestion, we found to launch CMD.exe via a Scheduled Task, but
it is not giving any option to launch CMD.exe in interactive mode; so that I can map network drive using net command.
4. I read an article, which
demonstrates the use of PSTools from SysInternals. I launched the command line and executed following command
psexec -i -s cmd.exe
PSTools worked fine, but It seems that in scope of Sysinternals Software License
Terms. You may not "use the software for commercial software hosting services."
Application will deploy on client, which will be like commercial,
so we are not able to use PSTools.
Kindly assist us for achieving the requirement. We have tried all the ways, but nothing is working for us. Kindly suggest.
I will be really thankful.

Hi Sir,
Nothing worked from above for us. You can see our remarks on posted query.
That’s why, we posted on forum.
And there will not be any vulnerability, because, if we will use "net
use ..."
in network domain; definitely,
we will provide username and password of mapped drive system.
And, that system, itself is given by client; so that, there must not be any vulnerability; they are ready to provide user name and password.
We need a way; by which we can complete the requirement. Kindly assist.
Regards,
S. P. Singh

How to unlock user account in Windows Server 2003

Hi,
I want to unlock a user account in Windows Server 2003.
I have read a great post at http://forums.sun.com/thread.jspa?threadID=716240&start=0&tstart=0
But I can not get it to work. According to the post the only thing you need to do is:
"+to unlock an account, just set the value of the attribute lockoutTime to zero+".
When I set lockoutTime to zero nothing happens. The user can still not logon.
When I read the lockoutTime attribute for an account that is locked it is empty or zero if I have tried to unlock it earlier.
So it doesn´t seem to change when the account is locked.
Thanks!

Hi,
Windows Server 2012 has come with the concept of Group Managed Service Account (gMSA).
Following are the benefits of gMSA,
- A single gMSA can be used on multiple hosts.
- A gMSA can be used for scheduled tasks.
- A gMSA can be used for IIS Application Pools, SQL 2012 etc.
Checkout the below link regarding complete information on gMSA (creation and usage),
http://blogs.technet.com/b/askpfeplat/archive/2012/12/17/windows-server-2012-group-managed-service-accounts.aspx
Checkout the below thread on similar discussion,
http://social.technet.microsoft.com/Forums/en-US/5bc96d1b-0cec-4d0c-a99d-7f34509c0714/how-to-use-correctly-managed-service-account-in-windows-server-2012-?forum=winserverDS
Regards
Gopi
JiJi Technologies

More than one SAP systems on same Windows Server 2003 - Oracle 10g

Hello Experts,
We have Windows Server 2003 with 32 GB RAM, 2 quadcore CPU, plenty of space. Already running with NW 700 AS Java on Oracle 10g.
Now we need to install a seperate NW 700 AS Java central instance - so please help me in clarifying following doubts - we don't want to use MCOD.
1. Do we need to install Oracle 10g software again or we can use the existing Oracle 10g installed files. If yes then will the Oracle Home for both the SAP instances will be same - any steps needs to be done for that.
2. Any other steps which needs to be taken care before and after the second instance installation.
3.SAP Note 98252 - speaks about changes in oraInst.loc before the second instance installation - Does it applicable for Windows - Oracle environment also. I am not able to find out this file.
Listener and Tnsnames file changes mentioned in this note seems to be applicable on windows platform also.
Pointers to related documentation would be highly appreciated.
Thanks
Davinder

Hello Davinder,
> 1. Do we need to install Oracle 10g software again or we can use the existing Oracle 10g installed files. If yes then will the Oracle Home for both the SAP instances will be same - any steps needs to be done for that
Theoretical you can use the same ORACLE_HOME, but i would really recommend to install the database software again in a different ORACLE_HOME. It will make a lot of things easier
> 2. Any other steps which needs to be taken care before and after the second instance installation.
The same as by the first installation, but keep in mind of the listener port - you will need to specify a different one.
> Does it applicable for Windows - Oracle environment also. I am not able to find out this file.
On windows it is a registry key (for more information please take a look at metalink note #564192.1)
C:\>reg query HKLM\SOFTWARE\ORACLE /v inst_loc
Regards
Stefan

10g R2 64-bit Oracle Database for MS Windows server 2003

we are upgrading our 10.2.03 32 bit Oracle Enterprise DB on 32 bit MS windows server 2003 to 10.2.0.3 64 bit Oracle Enterprise DB 64 bit MS windows server 2003
I got this Metalink ID
Doc ID: 403522.1 How to Migrate Oracle 10.2 32bit to 10.2 64bit on Microsoft Windows
I have searched for 10g R2 64 bit Oracle databases versions on MS windows server 2003 but din't gent any
I am not sure whether this database works for 64 bit MS windows server 2003
http://www.oracle.com/technology/software/products/database/oracle10g/htdocs/10201winx64soft.html
please let me know from where I can download 64-Bit 10g R2 Oracle Enterprise DB for 64-bit MS windows server 2003
Have posted in
English » Technology Network Community » Downloads section haven't seen any replies
thought of posting here
Thanks in Advance

If you are running the x64 version of Windows 2003 and not the Itanium version, you will find 10.2.0.1 here:
http://www.oracle.com/technology/software/products/database/oracle10g/htdocs/10201winx64soft.html
You may then patch it to 10.2.0.3 by downloading the patch from Metalink.
Charles Hooper
IT Manager/Oracle DBA
K&M Machine-Fabricating, Inc.

System Refresh On Windows Server 2003 ( Oracle )

Hello Gurus,
We are having ecc5.0 production server on windows 2003 server ( oracle as an database ).
We want to perform system copy.
can somebody guide me the procedure on windows server.
Server Information
ECC - 5.0
Window Server - 2003
Oracle ( 9.2.0.8.0)
I have one doubt should we use SAPinst for export/import procedure or backup restore from our production server to dev server
regards
Shishir

Hi Shishir,
I have one doubt should we use SAPinst for export/import procedure or backup restore from our production server to dev server
DEV System is your original System never refresh DEV System with Production. It is recommended to do System refresh on QA system or any other stand alone system (Test System).
Also see the below points.
1. If you have large database then use the backup restore process. this will help you to reduce your downtime.
2. You can go for the export/import process i.e R3load using SAPinst.
For more information see the system copy guide as suggested earlier.
Thanks,
Shambo

Memory system cache on windows server 2003 standard 64-bit is too hign

Hi,
I have an issue with one of the server - OS is windows 2003 standard 64 bit. Total memory installed on the server is 16GB. When I go to task manager>performance tab, Total physical memory is 16 GB, available memory is around 500 MB almost all the time,
System cache is greater than 13.5GB. When I take a look at all the processes that are running, and if I sum those memory usage it will be around 2 GB. So all the memory is consumed by system cache. Checked the perfmon > memory> system cache resident
bytes and it is showing greater than 13.5 GB. I have gone through some articles that tells me to use RAMMAP to find which is using more system cache. But RAMMAP is not designed to run with windows 2003 version. Please can you help with a way/tool to find what
is using system cache in windows 2003 server
Thanks in advance
Regards
RJ

It is supposed to do this. Windows can be very aggressive in caching data and code. This data is released as soon as the system needs memory for something else, but when it is unused, the system uses it to cache all sorts of stuff. It utilizes the memory
which would otherwise be unused. Leaving it unused would basically be a waste.
So in other words, nothing is wrong. It is windows which decides to try and be more efficient. As soon as a request for more memory comes in, it just drops whatever is needed from the cache immediately.
This is one of the reasons that in later versions, the memory is reported differently in task manager, because people kept trying to stop the system from caching because they wanted to see more 'free' memory.

Running a cscript.exe as LOCAL SYSTEM account and IE cache corruption for that account.

When running a cscript.exe wsf file that references a script that retrieved from the internet is it possible that some sort of IE cache corruption or permissions issue in
C:\Windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows will cause the script to fail to retrieve the external resource?
Also, is there some sort of known condition that will cause the permissions on C:\Windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows to not be set to any valid user?

The system profile is set to be protected. It should not be modified.
You cannot run a file downloaded from the Internet. It is tagged (blocked) and cannot be used until it is unblocked.
PowerShell has a CmdLet that does this: Unblock-File <filename>
¯\_(ツ)_/¯

Which operating system: Linux or Windows Server 2003?

Hi,
it doesn't matter which operating system we install an our server.
What are your experience with Linux and Windows?
Which System do you recommend regarding performance issues?
best regards
Felix

Linux has a higher per process memory limit. The fmscore process can use up to 2 GB on Windows and up to 3 GB on Linux.
The performance increases in Flash Media Server 3.5 are roughly equivalent on Linux and Windows.
HTH,
Jody

FMS Developer Ed & Local System account

Is it only possible to run the FMS service as the Local
System account in Windows Server 2003? I tried to change the Log On
params to a user with privileges to another server's share but the
service won't start up afterward. And in the info box in the FMS
Admin app there is a little tiny tooltip within the popup message
that says something about "License info". I changed the user back
to Local System account and the service started up right away. I'm
trying to test an app's ability to access a different path that's
set in the application.xml <VirtualDirectory><Streams>
node.
So, is it a limitation of the FMS Developer edition or is it
something on our end? I thought the only limitation was 10
conncections.

... i have unchecked that from there and again after some minutes say 10 -15 minutes it gets locked ...
Hi,
Perhaps you can look into these areas for stored (and expired) password:
Check to see if there are any Services that is running using the affected administrator account.
Check to see if there are any Scheduled Tasks running using the affected administrator account.
Hope that helps.
Cheers,
Tas Chew

SMA on Windows 7 with local system account

Hello,
I use SMA on Windows 7.
When I launch the wizard (sma.exe) to capture the profiles with an admin account : it works, i have myfile.sma and myfile.sma.DriveC, which contains all profiles.
But if I launch the same wizard (sma.exe) with Local System account, none of profiles are saves, so I don't have a myfile.sma.DriveC, juste myfile.sma one.
(i must use Local System account)
(to launch sma.exe as a local system account on Windows vista/7, you have to run cmd.exe as an admin, then launch "psexec -i -s cmd.exe" (so you have to dl psexec))
Thanks

When I launch SMA under the "SYSTEM" account, it seems the problem is that the user folders are not selected by default (even if you select the user accounts to migrate). So you have to select the files and folders that you want to migrate (e.g. the "c:\users" folder). When I did this, then I got both the .sma file and the .DriveC file in the location that I specified.
The way I run as "SYSTEM" is by replacing c:\windows\system32\magnify.exe with c:\windows\system32\cmd.exe and then choosing the Magnifer option at the windows logon screen (note that you have to take ownership of magnify.exe in order to replace it). This gives me a command prompt at the logon screen to do whatever I want to.
I don't think SMA was really designed to be run this way (under the "SYSTEM" account), so if you're still having problems after trying the above, then you're going to need to change your process to run SMA under an actual user account or else find some other tool to use.

Cannot Retrieve referenced URL in wscript file from Local System Account, but not other accounts on the computer.

Hello,
I have a WScript File that includes an external resource (js file).
It works on one computer and it does not work on another computer.
If I run this file from a normal admin command prompt everything runs fine on both computers.
If I run this file from the Local System account using PsExec it runs fine on one of the computers and throws an error "Cannot Retrieve referenced URL" on the other computer.
The reason I want it to run from the Local System account is that it is executed from a Windows Service.
Is there some setting or some way for the IE cache to get corrupt on the Local System account or something like that?

JRV,
You are by far the worst 'support' person I've ever seen. If you aren't going to be thoughtful in providing support, don't pretend. If you're going to pretend, leave your condescension on the shelf. You have provided no thoughtfulness whatsoever to his issue,
and have in no way improved the discourse. You are arrogant and condescending without exhibiting any intelligence whatsoever. I'm impressed Matt kept calm through your demeaning, counterproductive diatribes.
Matt,
First I'd check UAC settings, because I believe that can change how elevation works substantially.
Second, I would check the versions of wscript.exe on both machines, both in System32 and SysWow, and I'd check for updates bypassing WSUS to make sure there's not something silly going on there (totally a shot in the dark, catch-all theory).
Have you made any headway in the last few weeks?
-John
This is not a support forum and it is not for assistance in fixing broken configurations. It is a scripting forum. The OP proved that the issue is not the script but the environment it is running in. You should not get mad just because you are
not getting satisfaction.
¯\_(ツ)_/¯

Ifweb60 processes run as local system account on w2k- how do i change?

i am running forms 6i on an 2000 box using
the forms servlet config and oc4j with 9ias.
this runs fine except that the ifweb60 processes
are owned by the local system account. this in
turn means i can't map the forms60_path to a
network drive because i can't give network
privileges to a local system account. so,
how do i change the account that spawns the
ifweb60 processes?
thanks,
marta

Never mind, resolved this myself by using the netbios name to substitute the value I need on each individual domain.
$domain = Get-ADDomain | Select-Object -expandproperty netbiosname
Set-Location "dc=$domain,dc=dom,dc=co,dc=uk'
Sets location as:
PS AD:\dc=a,dc=dom,dc=co,dc=uk>
ON another domain same script results
PS AD:\dc=b,dc=dom,dc=co,dc=uk>
Exactly what I needed!

Help! Problem when running CF under a non-default service account

I am running ColdFusion 9 with IIS 7 on Windows Server 2008.
The CF application service is running under a domain application account rather than the default local.
The problem is when doing so failed templates keep an active request open indefinately.
Is there a permission setting I might be missing to resolve this issue?
Thanks for any help any one can provide.

Only when running CF under a domain account does the following occur:
If we have a cfm page that connects to a DB via a query tag and for some reason the query has an error,
Then it can be observed that the request to that page remains active as seen in the server monitor under statisitcs / Active Requests, it stays active and never closes although it should close. Over time such open threads add up until the Maximum number of simultaneous template requests limit is reached.
For some reason the request does not close as it should, but if we run the CF under the default system account this does not occur. I can only assume then the domain account has a permission issue. It currently does not have Full Control on the ColdFusion9 directory so I will try that next.

Unable to bind MacBook Pro (running 10.6 - Snow Leopard ) to Windows Server 2003 domain

Hi there, I've been working on this problem for a few hours now (and a few hours last Thursday) and don't feel I'm getting anywhere, so I'm reaching out for help....
My organisation has just purchased a new MacBook Pro, running Snow Leopard (OSX 10.6) and as a Technical Support Engineer I have been asked to configure it for an end user.
I am currently trying to join it to our corporate domain, which is a Windows Server 2003 domain operating at the Windows Server 2003 Native domain functional level.
The MacBook is configured to use DHCP, and has been assigned valid IP address, DNS servers etc by the DHCP server. It can resolve all names on our network, including the names of our domain controllers. When I use nslookup to resolve the name of the domain "my_domain.local" it returns a list of DC's on the domain, which would indicate to me that name resolution is working perfectly. It is using our primary DNS server, 'Ponus' to resolve these names - Ponus is also the Domain Controller in this site.
To attempt to join the MacBook to the domain I have created a computer account for it on the domain, in the Computers container. I have gone into System/Library/Core Services and run the Directory Utility.
In the directory Utility I have ticked Active Directory and clicked on it to edit. The 'Forest' field is greyed out and set to 'Automatic', in the 'Domain' field I have entered my_domain.local, which is the FQDN of my domain. I click Bind and when prompted enter my Domain Admin username and password (in the 'Create Computer Account in:' field it displays correctly as CN=Computers,DC=my_domain,DC=local.)
When I click OK I get the message: Invalid domain. An invalid Domain and Forest combination was specified. You should enter a fully qualified DNS name for the domain and forest (e.g., ads.company.com).
I have attempted writing the domain as my_domain.local, my_domain.local., MY_DOMAIN.LOCAL and MY_DOMAIN.LOCAL. but I get the same error each time. I have checked and rechecked DNS is resolving OK, and cannot see why it cannot find the Domain and Forest from the FQDN that I am entering. Even so I tried creating records in the hosts file on the MacBook to point to the main Domain Controller at this site (Ponus) but this didn't change anything.
I have seen a few people report the same issue online but the responses tend to fizzle out before anyone gets to the bottom of it. I have seen some indication that people with an understore (_) in their domain name, or with a .local domain name may experience issues with joining Mac hosts, however these details are very vague and if true there must be a workaround.
If anyone could help me with this I would greatly appreciate it, I'm running out of time to complete this work and have run out of things to try.
I have an inkling that this is due to the Mac for some reason not reading the SRV records for the DCs and LDAP in DNS, or to do with the Mac looking only at one SRV record (ie. there is one for a new DC that we haven't deployed yet), not being able to reach this and giving up, but I'm clutching at straws really with my limited knowledge of the Macs process for joining the domain.
Many many thanks,

Hi there,
A simple suggestion , please make sure both MacBook Pro clock and the server clock are the same meaning the hour/Min/ sec both should match. A least difference of 3 seconds is fine.
I had faced this problem in many place and only solution was to match the time and it will bind immediatly.

Running 10G as a non local system account on Windows Server 2003

Similar Messages

Maybe you are looking for