Windows Terminal Server - Oracle Logon Problem

I have a Windows 2003 R2 server setup as an application terminal server.  I am able to connect to a remote Oracle DB as an administrator but not with a user in the "Users" group.  Also, if I establish a connection to the Oracle server as an administrator and then open another terminal server session with a "User" account I can establish a connection to the Oracle server.  If I disconnect the administrator session I loose the user session as well.

I am using Oracle 10g drivers on the server.  I setup a packet capture and do not even see any packets leaving the server when the logon fails.  The Oracle logon error is: Window Title: Connection Error - "Error on Connection to Oracle Database: - 2147467259?"

When the logon fails I get a Windows Security Event ID: 577, Type: Failure Aud, Category: Privilege Use.  In the Description under Privileges it indicates "SeCreateGlobalPrivilege".

It appears Windows/Oracle cannot make a new network connection out of the server as a User.  I do not have the Windows firewall on.  I have an X-Windows Client on this same server that works fine and it opens and closes ports.

Please help.

Thanks in advance!!!
mbrian7Asked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

mrjoltcolaCommented:
You are saying that the Windows 2003 server is just an Oracle client, correct? And you are logging into it with term services and then executing an app that connects remotely to an actual Oracle db server.

It is possible that you installed the Oracle client on the box as administrator, and the other user does not have access to the software install. Possibly it is simple a permissions problem on the client box itself. All users must be able to see the Oracle Home directory (read / execute perms).


0
schwertnerCommented:
Possibly because of port redirection there are no possibilyty to keep the ports open.
Possibly port get blocked for some reason.
The complex environment you use the more problems will you have.
0
mbrian7Author Commented:
mrjoltcola,
I have made sure the C:\Oracle folder has the permissions for the User group.  I even gave my "test" user ID full rights and forced inheritance on the Oracle folder as a test.  Still has the same reults.  Since this is a new setup I am going to roll back to a previous image of the server setup and try to reinstall Oracle.  Thanks.
0
mrjoltcolaCommented:
I'm sorry that I cannot help more. I don't quite understand your configuration, it sounds a bit complex but perhaps it was just my inability to understand the explanation. I have not seen that error before but it seems like an OS config or security issue, not an Oracle issue. Good luck.

0
mbrian7Author Commented:
I finally found a couple of articles that reference what I am seeing.  Not exactly the same problem but the fix is the same. Thanks to ArildS on this site.

http://www.experts-exchange.com/Databases/Oracle/Q_21572054.html and http://support.microsoft.com/default.aspx?kbid=821546 .

Assign the "Create global objects" user right to the non-Administrator account.

1. Click Start, point to Programs, point to Administrative Tools, and then click Local Security Policy.
2. Expand Local Policies, and then click User Rights Assignment.
3. In the right pane, double-click Create global objects.
4. In the Local Security Policy Setting dialog box, click Add.
5. In the Select Users or Group dialog box, click the user account that you want to add, click Add, and then click OK.
6. Click OK.
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Windows Server 2003

From novice to tech pro — start learning today.