User Limitations in Terminal Services Sessions

I have a brand new Terminal Server running Server 2008 with the roles of File Server and Terminal Server installed. I have added a user to the Remote Desktop Users group and can login to the server fine via a thin client using RDP. However, several programs seem to be having issues running under this user. When I login as Administrator the programs function fine. Also when I add the user to the local Administrators group the programs run fine. I do not want to have any users in the local admin group for obvious reasons. I have set full access rights to the folder containing the exe's and still no luck. Some of the programs run but then claim the database cannot be contacted. Any suggestions would be greatly appreciated.
nohbusaAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

jaydee-cdgpCommented:
How about adding the user to the Power Users Group?
0
nohbusaAuthor Commented:
I'm sorry I failed to mention that I already tried that as well with no luck. Thanks for the suggestion.
0
nohbusaAuthor Commented:
After further research it is apparent that the issue surrounds UAC (User Access Control). For example if I right click on the icon and "run as administrator" then the program functions fine. I am now researching how to establish embedded credentials so that the program runs elevated as administrator at all times without requiring credentials. This feels like a work around, so if anyone knows how to truly solve the issue I would appreciate the input.
0
jaydee-cdgpCommented:
Sounds like some of your programs require elevation to run properly.

Try this: http://www.tipandtrick.net/2008/bypass-or-disable-uac-for-selected-excluded-programs-only-with-elevator-skipuac/

You will have to do this to every program that is having problems running not elevated.
0
nohbusaAuthor Commented:
Jaydee-cdgp,
I appreciate your input. I am really looking for a legitimate way to make this function rather than installing a hack. I have discovered a method that isn't perfect but is very simple and does not require any applications. The method is to call a script that will run the program as an Administrator. You can make a shortcut point to the script which in turn executes the application using adminstrative credintials. The shortcuts icon can be changed to match the application and thus appears seamless to the user. Unfortunately if the user was to follow the target to the script and open it for editing they would be able to see the administrative credentials which poses a rather large security risk when you have multiple scripts in place for each program needing elevated status to execute.
This method is still a work-around that I don't like because of the stated security risks. I am perplexed because prior to setting up this server I had a user setup on our exchange server as a test environment. The only difference between the actual terminal server and the exchange server is exchange. Yet on the exchange server the user is able to execute the exact same programs within the 2008 enviroment and does not need to do any elevation. So unless the installation of exchange alters the security settings of the server for all users, there should be a way to get my other 2008 server to behave the same way.
Thank you all for your input.
I have attached a

elevateScript.txt
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
OS Security

From novice to tech pro — start learning today.