Quickbooks Enterprise 2017 gives "administrator permissions" error on Windows 2012 R2 RDS box.

We have an RDS server set up on Server 2012 R2.  It has Quickbooks Desktop Enterprise Solutions:  Accountant 17.0, Quickbooks Premier Accountant Edition 2016, and Quickbooks Premier Accountant Edition 2017 installed.  There are fewer than 10 users.  

The RDS users all have local accounts, though the RDS server is part of a domain.  (We figured that by sticking with local accounts, that would ensure that the users had absolutely no access to any other network resources.)  All of the RDS users are members of the Remote Desktop Users and Users groups.  

The standard user is locked down and does not have access to browse the C: drive.  When setting up each user, we left administrator access enabled, then opened the database files in Quickbooks so they would show up in the list of recently opened files, and then removed administrator access.  This gave them the ability to open the database files through Quickbooks while restricting their ability to browse the C: drive.

The folder structure is a folder called Quickbooks located on the root of the C: drive, with subfolders for each user's company files.  Each user is the owner of its respective folder, and Creator Owner has full control.  Also, the local administrator, domain administrator, and system accounts have full control to the Quickbooks folder and all of its subfolders.  The users cannot browse to any folders (through the Quickbooks file-open prompt) aside from their own folder.  

The users who are using QB AE 2016 and 2017 do not have any problems.  When the user who uses QB Enterprise 17.0 attempts to open a company file, the following error appears:
"This action requires Windows adminsitrator permissions."  The choices are Continue or Cancel.  Cancel, unsurprisingly, cancels the attempt to open the company file, and clicking Continue returns the following error:
"We're sorry.  Quickbooks encountered a problem.  Error codes: (-12, 0)."

If I make the problematic user a member of the administrators group, they are able to open their company files with no issues.  After removing administrator permissions, the above errors return.

I have made the following changes (found during Google searches) with no effect:
--Made the QuickBooks DB27 user a member of the administrators group
--Changed the QuickBooks DB27 service to run as Local System and gave it the ability to interact with the desktop.
--Changed QBCFMonitorService, QBIDPService, and QuickBooksDB27 service to all log in as the domain administrator account.  
--Disabled UAC in the registry.
--Server has been rebooted as needed throughout the process.  

I'm about out of ideas at this point.
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

JohnBusiness Consultant (Owner)Commented:
Are you using the Server Manager from the QB Enterprise ISO or disk?  That is the first thing I would try.
JohnBusiness Consultant (Owner)Commented:
Also there is more than one QB Service on the Server. Make sure all are running as a local (admin) service.
SINC_dmackAuthor Commented:
I don't follow what you're asking, John.  Using Server Manager from where, for what?
Become a Certified Penetration Testing Engineer

This CPTE Certified Penetration Testing Engineer course covers everything you need to know about becoming a Certified Penetration Testing Engineer. Career Path: Professional roles include Ethical Hackers, Security Consultants, System Administrators, and Chief Security Officers.

SINC_dmackAuthor Commented:
Oh wait, you must be referring to the Quickbooks Database Server Manager.  The tech who installed all of the versions of Quickbooks said that he always selected "I will be storing my company file on this computer and running Quickbooks on this computer", with the expectation that it would not install the DB Manager.  However, the DB Manager is definitely present.  It is (32-bit).  

It was blank under "add the folders containing your company files" so I added C:\quickbooks and hit Start Scan.  It says "Quickbooks Enterprise Solutions 17.0 Server Running.  Network Diagnostics: Repair successful!".  But when I log in as the user in question, it gives the same permissions error as from my first post.
JohnBusiness Consultant (Owner)Commented:
On the QB disk (ISO), one of the programs say QB No license need. That is the server manager. You need that program installed on the server and you need the one from the QB Enterprise disk.
JohnBusiness Consultant (Owner)Commented:
I think at this point you should contact Intuit Support.

You can also run the Intuit Network Diagnostics to see if you have a firewall or antivirus issue.  That could cause what you see.
SINC_dmackAuthor Commented:
It's not a Windows firewall issue (turning it off has no effect) or an antivirus issue (it's not installed).

Intuit support, from what I've found thus far, is likely just going to suggest that I give the user administrative-level permissions, which isn't going to be an acceptable permanent solution.  https://community.intuit.com/questions/1347986-error-code-12-0
JohnBusiness Consultant (Owner)Commented:
I agree about admin permissions. There are other network settings that can cause issues (we have been through this with QB Premier). I do suggest running Intuit Network diagnostics, keep the results and follow with Intuit support. We keep Intuit Support maintenance and generally find them helpful for this kind of issue.
So, it sounds like its setup all wrong.  You will not get quickbooks to work properly this way.  
You have users remoting into the server to access Quickbooks, but restricting the C Drive, Quickbooks will not operate this way.  What they really should have is quickbooks installed on their local machines.  Those machines then connect to the server which you will have Quickbooks database server manager installed on.

You need to completely uninstall quickbooks from the server using these instructions: https://support.sonicwall.com/kb/sw4535
Then reinstall and use the 3rd option.  NOT using quickbooks but storing it.  Create a network shared folder, and set the permissions, and designate Quickbooks database server manager to it.  
Then on the users workstation, open the quickbooks file you plan to open, just remember to open it in multi user mode if you plan on having multiple users on at the same time.
SINC_dmackAuthor Commented:
With no other viable options at the time, I ended up calling Intuit support yesterday afternoon.  The client actually had "gold level" support, and after about 30 minutes on the phone (mostly him suggesting things that I had already tried), the Intuit tech was able to come up with a (partial) solution.  

Since all of the users are running QB natively on the RDS server without any other workstations accessing Quickbooks over the network, and since at most only one user was access each QB database at a given time, Quickbooks didn't need to be set up to provide multi-user support.  However, for whatever reason, The QB Enterprise 17 install was configured for multi-user mode.  As soon as I disabled multi-user support (while logged into Windows as the domain administrator account), the QuickBooksDB27 service disabled itself and I was able to open company files in QB Premier and QB Enterprise simultaneously.  https://support.itopia.us/hc/en-us/articles/213103123-Windows-administrator-permissions-error-when-opening-QuickBooks-company-file

However, as soon as multi-user access was re-enabled, the problem returned.  I'd already gotten off the phone with Intuit support so I did a bit more searching and found this article from Intuit that describes the potential issues with having multiple EDITIONS vs. multiple VERSIONS of QB installed on the same computer.  https://community.intuit.com/questions/1327887-install-multiple-quickbooks-versions-on-one-computer  

In short, it looks like QB Premier 2017 and QB Enterprise 2017 use the same service, QuickBooksDB27, for hosting multi-user access, but they don't like to share it.  If multi-user access is enabled, the first user to log into the RDS server will determine which version of QB will work--if the first user uses QB Premier, then subsequent QB Enterprise users will get the "administrator permissions" error, and vice versa.  If all Premier users log off, then Enterprise users should be able to work, but Premier users will then get the "administrator permissions" error.

Fortunately, users who are not administrators on the RDS server cannot enable multi-user access.

I have advised the client that as long as their users only need to have one user in each QB database file at a given time, there should be no further problems, but as soon as they have a two users that want to access the same company files at the same time, we are going to have to break off the Enterprise users to a different server, keeping Premier and Enterprise on separate RDS servers.

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
JohnBusiness Consultant (Owner)Commented:
That sounds complicated. My users either use Premier or Enterprise but not both at the same time.

Keeping Enterprise separate on its own server is probably the best solution.
SINC_dmackAuthor Commented:
This particular client is an accounting office that provides hosted Quickbooks services for its customers, through an RDS server that we host for them.  They plan to attempt to migrate the new customer that is currently using Enterprise to Premier, as they said that having multi-user-access disabled is not plausible, and they also don't want the expense of a second RDS server.  Thanks again for your input!
SINC_dmackAuthor Commented:
John's suggestion to contact Intuit support led me to Intuit support providing a partial solution and enhancing my understanding of the problem.
JohnBusiness Consultant (Owner)Commented:
You are very welcome and I was pleased to help you with this.
Michael AIT ConsultantCommented:
Hi does anyone know if Intuit have this terminal server limitation documented on their website?  I read the part that they do not assist with connectivity issues which is fair enough, but if the software would not work properly (@Knightsman) it seems like something they should mention
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today

From novice to tech pro — start learning today.