[Last Call] Learn how to a build a cloud-first strategyRegister Now

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 1038
  • Last Modified:

Problem with shortcut

I have installed an application (Microsoft Robocopy GUI) on a terminal server\Citrix presentation server while in install mode.  When a power user logs in to the server (Windows 2003 R2)  they receive a message, "Only administrators have permission to add, remove or configure software during a terminal services remote session.  The application is installed and admins have no problem.  I can see that upon login of the power user windows installer initiates.  can you assist with resolving the issue.
0
dmelin
Asked:
dmelin
  • 7
  • 4
  • 2
1 Solution
 
snowdog01Commented:
It appears that the applicaiton requires access to some specific files that the Power Users do not have permissions to or have limited permissions to.   Have you tried logging in a test user from the Ctirx server console to see if the Robocopy launchs the same installer start of if it works without any issues?  I suspect that Citirx is doing it's part to service the application, but the application is missing either some files or some additional configuration/permissions.  Typically, when you install an application in "install" mode, it provides permissions for all users of that Terminal Server.  You may need to remove/reinstall Robocopy to correct this.
0
 
dmelinAuthor Commented:
It actually happens when the test power user logs into the Server thru the Citrix farm portal.  The server is configured in Present Desktop mode when this happens.  I have tried to uninstall and reinstall the app licationbut the problem still exists.  
0
 
Carl WebsterCommented:
Not all applications work in a Terminal Server/Citrix environment.  I have Robocopy GUI here.  Let me test this in my Citrix lab and see what happens.
0
Concerto's Cloud Advisory Services

Want to avoid the missteps to gaining all the benefits of the cloud? Learn more about the different assessment options from our Cloud Advisory team.

 
Carl WebsterCommented:
Yep, I can only get an admin level user to successfully run it from the published server's desktop.  The same user had no problems running it as a Published Application though!  Strange.
0
 
dmelinAuthor Commented:
Strange indeed but not unique so I feel better.  I actually gave power users full access the the program directory.  But it didn't work.  
0
 
Carl WebsterCommented:
It is probably a bad app trying to write something into the SYSTEM32 folder tree.  I have seen a LOT of banking apps that do that.  I would research further with Regmon/Filemon/Process Explorer but I don't have the time right now.
0
 
Carl WebsterCommented:
Found the issue.  Even when installed for "Everyone", it looks for stuff in the profile of the installing user.  See these print screens.


robocopy1of3.GIF
robocopy2of3.GIF
robocopy3of3.GIF
0
 
dmelinAuthor Commented:
So how would you resolve as I wouldn't think giving users access to the installers profile is the option.  Perhaps a registry change

0
 
Carl WebsterCommented:
One option would be to create a dummy admin account, install robocopy, delete dummy admin account, give Everyone READ access to the folder tree in the profile that contains the Robocopy files.
0
 
snowdog01Commented:
How about giving all users access to the Microsoft Robocopy GUI folder under the administrator's profile on the local C: drive?  This does not give them permissions on any other folder/files from the adminstrator's profile nor the domain; just the local server.
0
 
Carl WebsterCommented:
Have a look in

HKCU\Software\Microsoft\Microsoft Robocopy GUI
HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\Folders
HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\5EF52B431895E93

well, actually there are a few keys in that location.  ust do a search in the registry.

0
 
dmelinAuthor Commented:
I will review the registry keys.  Are you suggesting that I give power users permission to those keys?
0
 
Carl WebsterCommented:
Or move the files to a different location and change the registry keys to reflect the change.
0

Featured Post

Free recovery tool for Microsoft Active Directory

Veeam Explorer for Microsoft Active Directory provides fast and reliable object-level recovery for Active Directory from a single-pass, agentless backup or storage snapshot — without the need to restore an entire virtual machine or use third-party tools.

  • 7
  • 4
  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now