Solved

Windows Terminal Server - Oracle Logon Problem

Posted on 2009-07-15
6
1,543 Views
Last Modified: 2012-05-07
I have a Windows 2003 R2 server setup as an application terminal server.  I am able to connect to a remote Oracle DB as an administrator but not with a user in the "Users" group.  Also, if I establish a connection to the Oracle server as an administrator and then open another terminal server session with a "User" account I can establish a connection to the Oracle server.  If I disconnect the administrator session I loose the user session as well.

I am using Oracle 10g drivers on the server.  I setup a packet capture and do not even see any packets leaving the server when the logon fails.  The Oracle logon error is: Window Title: Connection Error - "Error on Connection to Oracle Database: - 2147467259?"

When the logon fails I get a Windows Security Event ID: 577, Type: Failure Aud, Category: Privilege Use.  In the Description under Privileges it indicates "SeCreateGlobalPrivilege".

It appears Windows/Oracle cannot make a new network connection out of the server as a User.  I do not have the Windows firewall on.  I have an X-Windows Client on this same server that works fine and it opens and closes ports.

Please help.

Thanks in advance!!!
0
Comment
Question by:mbrian7
  • 2
  • 2
6 Comments
 
LVL 40

Expert Comment

by:mrjoltcola
ID: 24865344
You are saying that the Windows 2003 server is just an Oracle client, correct? And you are logging into it with term services and then executing an app that connects remotely to an actual Oracle db server.

It is possible that you installed the Oracle client on the box as administrator, and the other user does not have access to the software install. Possibly it is simple a permissions problem on the client box itself. All users must be able to see the Oracle Home directory (read / execute perms).


0
 
LVL 47

Expert Comment

by:schwertner
ID: 24867321
Possibly because of port redirection there are no possibilyty to keep the ports open.
Possibly port get blocked for some reason.
The complex environment you use the more problems will you have.
0
 

Author Comment

by:mbrian7
ID: 24873736
mrjoltcola,
I have made sure the C:\Oracle folder has the permissions for the User group.  I even gave my "test" user ID full rights and forced inheritance on the Oracle folder as a test.  Still has the same reults.  Since this is a new setup I am going to roll back to a previous image of the server setup and try to reinstall Oracle.  Thanks.
0
 
LVL 40

Expert Comment

by:mrjoltcola
ID: 24873784
I'm sorry that I cannot help more. I don't quite understand your configuration, it sounds a bit complex but perhaps it was just my inability to understand the explanation. I have not seen that error before but it seems like an OS config or security issue, not an Oracle issue. Good luck.

0
 

Accepted Solution

by:
mbrian7 earned 0 total points
ID: 24907447
I finally found a couple of articles that reference what I am seeing.  Not exactly the same problem but the fix is the same. Thanks to ArildS on this site.

http://www.experts-exchange.com/Databases/Oracle/Q_21572054.html and http://support.microsoft.com/default.aspx?kbid=821546 .

Assign the "Create global objects" user right to the non-Administrator account.

1. Click Start, point to Programs, point to Administrative Tools, and then click Local Security Policy.
2. Expand Local Policies, and then click User Rights Assignment.
3. In the right pane, double-click Create global objects.
4. In the Local Security Policy Setting dialog box, click Add.
5. In the Select Users or Group dialog box, click the user account that you want to add, click Add, and then click OK.
6. Click OK.
0

Featured Post

Backup Your Microsoft Windows Server®

Backup all your Microsoft Windows Server – on-premises, in remote locations, in private and hybrid clouds. Your entire Windows Server will be backed up in one easy step with patented, block-level disk imaging. We achieve RTOs (recovery time objectives) as low as 15 seconds.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Working with Network Access Control Lists in Oracle 11g (part 2) Part 1: http://www.e-e.com/A_8429.html Previously, I introduced the basics of network ACL's including how to create, delete and modify entries to allow and deny access.  For many…
From implementing a password expiration date, to datatype conversions and file export options, these are some useful settings I've found in Jasper Server.
This video shows setup options and the basic steps and syntax for duplicating (cloning) a database from one instance to another. Examples are given for duplicating to the same machine and to different machines
This video shows how to copy an entire tablespace from one database to another database using Transportable Tablespace functionality.

920 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

16 Experts available now in Live!

Get 1:1 Help Now