User Access

Hello, I recently set up a windows 2008 r2 server to replace an older 2003 server with older software. when I login to the server with admin everything works, but when i log in with user accounts under our Active directory they are configured to boot a program on startup. I was getting a message saying unable to find program and then it would log you out of the server. So i figured it was an issue with booting on start so i disabled this is remote desktop session host config. Now when they boot to desktop i cannot see the drive the program is installed on. So i figure this is my problem, those accounts must lack access to the drive/applications. My question is how to set the permissions for these accounts to be able to access the drive/application i need to boot on start up. WE have an active directory server, do i need to install anything on this new server for AD ? Do i make changes in AD ? on the server itself ?
kbreitungAsked:
Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

x
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Emmanuel AdebayoGlobal Windows Infrastructure Engineer - ConsultantCommented:
Log on to your Windows 2008 Server with account that have admin privilege
Ensure that Authenticated Users and SYSTEM has Modify and Full Control respectively on the root of your drive.
0
Will SzymkowskiSenior Solution ArchitectCommented:
Have you checked what Group Policies have been applied to this server? Does this happen when you are logging in with any other accounts?

Run RSOP.msc on the machine and see what computer/user policies are being applied.

Will.
0
kbreitungAuthor Commented:
Authenticated Users and System have full control of the drive. Yes it happens on all accounts besides the admin account. All the policies look like they are the default of the domain.
0
The 7 Worst Nightmares of a Sysadmin

Fear not! To defend your business’ IT systems we’re going to shine a light on the seven most sinister terrors that haunt sysadmins. That way you can be sure there’s nothing in your stack waiting to go bump in the night.

Will SzymkowskiSenior Solution ArchitectCommented:
Does this happen to only 1 desktop? or is this the same affect for all machines?

If this is just 2 one machine have you tried "last known good configuration"?

Will.
0
kbreitungAuthor Commented:
same effect on all machines, it seems like its an access setting or permission.  I tried allowing full permissions to the user account specifically for the drive and i get an error message that says an error occured while applying secuirty information to :        C:\pagefile.sys The process cannot access the file because it is being used by another process. and behinde that i get windows security pop up box setting security information on: C:\Programimtryingtorun.msp
0
Will SzymkowskiSenior Solution ArchitectCommented:
Do you have any startup scripts that would be modifying permissions? Can you check the logs on a machine using the administrator account?

If this is affecting all machines I would think it would be something like a group policy, anti-virus, a virus etc, that would be causing this.

Will.
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Active Directory

From novice to tech pro — start learning today.