PS$ Published app only launches with Citrix Admin or Domain Admin User and Password

w7kr
w7kr used Ask the Experts™
on
Hi Everyone,

I am using Presentation Server 4 with Advanced Access Control and Citrix Access Gateway with a single farm server. I have several published applications and all launch fine except for one. The application that will not launch except with Domain Admin logon is an accounting application.

The app has the appropriate users in the the published app properties. The startup directory has the appropriate security and user access. The application will launch fine if I use the Domain Admin user logon. This same logon is also the data store logon for SQL. I don't think that it is a permission issue because I set up another user and gave that user all of the Domain authority and that user could not launch the app?

Any one have any thoughts on this issue?

Thanks!
Comment
Watch Question

Do more with

Expert Office
EXPERT OFFICE® is a registered trademark of EXPERTS EXCHANGE®

Commented:
Well, you could use RegMon and FileMon to see what the security issue/rights issue might be...otherwise you need to give up some more info.  Anything logged in the event viewer regarding this?  

RegMon - http://www.sysinternals.com/Utilities/Regmon.html
FileMon - http://www.sysinternals.com/Utilities/Filemon.html

Author

Commented:
Nothing logged in the event viewer. I have tried Filemon and nothing stuck out. I was looking for "access denied" or something similiar. I also ran Regmon and could see all of the keys that were being accessed. I need to study both of these a bit further.

The key here is why this one user can launch the app just fine? So, you would think that it would be a permissions or rights issue, but I haven't nailed it down yet.

Thanks!
Commented:
Remember, regedit won't show permissions; for that you need to use Regedt32 and use Permissions from the 'View' menu.  Good luck and keep posting your status.  I will try to think of more to try!
Bootstrap 4: Exploring New Features

Learn how to use and navigate the new features included in Bootstrap 4, the most popular HTML, CSS, and JavaScript framework for developing responsive, mobile-first websites.

Author

Commented:
BLipman - Thanks,

I might not get back to this until Monday. I will post the status after I try a few things. Thanks for your help!

Author

Commented:
OK - Latest update.

If I change the logon to anonymous in the Users area of the application launch permissions, the application will launch but then fail to connect with the ODBC connection because it passes the logon through to the application and the anonymous user is not a valid NT login for the ODBC connection. It tried changing the ODBC DSN to SQL authenication, but same issue. I assume that it is using the DSN being used to launch this application is on the Citrix server which is where I am starting the application from?

So, a anonymous user can start the app but an authenicated one can't? Insead of using groups, I entered the individual user in the application launch properties, but same issue?

Thanks!

Author

Commented:
I believe that the issue is now resolved. All remote users needed to have logon authority in SQL Server for the database being used by the accounting application. I ran across this today through a process of elimination.

BLipman - I will reward you with the points since you had several suggestions and were the only one who responded.

Thank You!

Commented:
Thanks for the points, I am really glad you figured out what was happening!

Do more with

Expert Office
Submit tech questions to Ask the Experts™ at any time to receive solutions, advice, and new ideas from leading industry professionals.

Start 7-Day Free Trial