LogisticsOne
asked on
Add domain user permission to use Local System account in service
I have a program that installed a service and a program onto a Windows 2008R2 server. The service is set up with the Log On tab set to Log on as: Local System account.
When I log onto the server as the user that I did the install with (domain/administrator) I can run the program with no problems. If I log on as a different domain/admin account, the program gives me an access error.
I don't know how the Local Accounts work with Windows (obviously), but is there a way to add the security group "Domain Admins" to the Local System account?
The software company hasn't been helpful with their responses, but they said I could change the radio button from Local System to This account: and specify a username/password. But, I can only add a user, not a group. So how can I add all domain admins to that user account so any administrator can run the program?
When I log onto the server as the user that I did the install with (domain/administrator) I can run the program with no problems. If I log on as a different domain/admin account, the program gives me an access error.
I don't know how the Local Accounts work with Windows (obviously), but is there a way to add the security group "Domain Admins" to the Local System account?
The software company hasn't been helpful with their responses, but they said I could change the radio button from Local System to This account: and specify a username/password. But, I can only add a user, not a group. So how can I add all domain admins to that user account so any administrator can run the program?
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
If we lower UAC, we don't get access at files, sorry. Please explain in detail, so you can be helped out. Maybe you think it is solved simply because you are using an admin user. Try a restricted user and lowering UAC will have no effect on file access.
ASKER
No one answered my question, and my solution didn't really have anything to do with the original question.
I really wonder why you are not interested in a solution. I mean, you are, that's why you are here, but why did you ignore my last comment?
--
As for your question: you would first need to understand how that software works and share it here - no advising possible for now.