Solved

Windows Terminal Server - Oracle Logon Problem

Posted on 2009-07-15
6
1,555 Views
Last Modified: 2012-05-07
I have a Windows 2003 R2 server setup as an application terminal server.  I am able to connect to a remote Oracle DB as an administrator but not with a user in the "Users" group.  Also, if I establish a connection to the Oracle server as an administrator and then open another terminal server session with a "User" account I can establish a connection to the Oracle server.  If I disconnect the administrator session I loose the user session as well.

I am using Oracle 10g drivers on the server.  I setup a packet capture and do not even see any packets leaving the server when the logon fails.  The Oracle logon error is: Window Title: Connection Error - "Error on Connection to Oracle Database: - 2147467259?"

When the logon fails I get a Windows Security Event ID: 577, Type: Failure Aud, Category: Privilege Use.  In the Description under Privileges it indicates "SeCreateGlobalPrivilege".

It appears Windows/Oracle cannot make a new network connection out of the server as a User.  I do not have the Windows firewall on.  I have an X-Windows Client on this same server that works fine and it opens and closes ports.

Please help.

Thanks in advance!!!
0
Comment
Question by:mbrian7
  • 2
  • 2
6 Comments
 
LVL 40

Expert Comment

by:mrjoltcola
ID: 24865344
You are saying that the Windows 2003 server is just an Oracle client, correct? And you are logging into it with term services and then executing an app that connects remotely to an actual Oracle db server.

It is possible that you installed the Oracle client on the box as administrator, and the other user does not have access to the software install. Possibly it is simple a permissions problem on the client box itself. All users must be able to see the Oracle Home directory (read / execute perms).


0
 
LVL 48

Expert Comment

by:schwertner
ID: 24867321
Possibly because of port redirection there are no possibilyty to keep the ports open.
Possibly port get blocked for some reason.
The complex environment you use the more problems will you have.
0
 

Author Comment

by:mbrian7
ID: 24873736
mrjoltcola,
I have made sure the C:\Oracle folder has the permissions for the User group.  I even gave my "test" user ID full rights and forced inheritance on the Oracle folder as a test.  Still has the same reults.  Since this is a new setup I am going to roll back to a previous image of the server setup and try to reinstall Oracle.  Thanks.
0
 
LVL 40

Expert Comment

by:mrjoltcola
ID: 24873784
I'm sorry that I cannot help more. I don't quite understand your configuration, it sounds a bit complex but perhaps it was just my inability to understand the explanation. I have not seen that error before but it seems like an OS config or security issue, not an Oracle issue. Good luck.

0
 

Accepted Solution

by:
mbrian7 earned 0 total points
ID: 24907447
I finally found a couple of articles that reference what I am seeing.  Not exactly the same problem but the fix is the same. Thanks to ArildS on this site.

http://www.experts-exchange.com/Databases/Oracle/Q_21572054.html and http://support.microsoft.com/default.aspx?kbid=821546 .

Assign the "Create global objects" user right to the non-Administrator account.

1. Click Start, point to Programs, point to Administrative Tools, and then click Local Security Policy.
2. Expand Local Policies, and then click User Rights Assignment.
3. In the right pane, double-click Create global objects.
4. In the Local Security Policy Setting dialog box, click Add.
5. In the Select Users or Group dialog box, click the user account that you want to add, click Add, and then click OK.
6. Click OK.
0

Featured Post

Ransomware-A Revenue Bonanza for Service Providers

Ransomware – malware that gets on your customers’ computers, encrypts their data, and extorts a hefty ransom for the decryption keys – is a surging new threat.  The purpose of this eBook is to educate the reader about ransomware attacks.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Note: this article covers simple compression. Oracle introduced in version 11g release 2 a new feature called Advanced Compression which is not covered here. General principle of Oracle compression Oracle compression is a way of reducing the d…
I remember the day when someone asked me to create a user for an application developement. The user should be able to create views and materialized views and, so, I used the following syntax: (CODE) This way, I guessed, I would ensure that use…
Video by: Steve
Using examples as well as descriptions, step through each of the common simple join types, explaining differences in syntax, differences in expected outputs and showing how the queries run along with the actual outputs based upon a simple set of dem…
This video shows syntax for various backup options while discussing how the different basic backup types work.  It explains how to take full backups, incremental level 0 backups, incremental level 1 backups in both differential and cumulative mode a…

839 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question