Avatar of SINC_dmack
SINC_dmack
 asked on

Quickbooks Enterprise 2017 gives "administrator permissions" error on Windows 2012 R2 RDS box.

We have an RDS server set up on Server 2012 R2.  It has Quickbooks Desktop Enterprise Solutions:  Accountant 17.0, Quickbooks Premier Accountant Edition 2016, and Quickbooks Premier Accountant Edition 2017 installed.  There are fewer than 10 users.  

The RDS users all have local accounts, though the RDS server is part of a domain.  (We figured that by sticking with local accounts, that would ensure that the users had absolutely no access to any other network resources.)  All of the RDS users are members of the Remote Desktop Users and Users groups.  

The standard user is locked down and does not have access to browse the C: drive.  When setting up each user, we left administrator access enabled, then opened the database files in Quickbooks so they would show up in the list of recently opened files, and then removed administrator access.  This gave them the ability to open the database files through Quickbooks while restricting their ability to browse the C: drive.

The folder structure is a folder called Quickbooks located on the root of the C: drive, with subfolders for each user's company files.  Each user is the owner of its respective folder, and Creator Owner has full control.  Also, the local administrator, domain administrator, and system accounts have full control to the Quickbooks folder and all of its subfolders.  The users cannot browse to any folders (through the Quickbooks file-open prompt) aside from their own folder.  

The users who are using QB AE 2016 and 2017 do not have any problems.  When the user who uses QB Enterprise 17.0 attempts to open a company file, the following error appears:
"This action requires Windows adminsitrator permissions."  The choices are Continue or Cancel.  Cancel, unsurprisingly, cancels the attempt to open the company file, and clicking Continue returns the following error:
"We're sorry.  Quickbooks encountered a problem.  Error codes: (-12, 0)."

If I make the problematic user a member of the administrators group, they are able to open their company files with no issues.  After removing administrator permissions, the above errors return.

I have made the following changes (found during Google searches) with no effect:
--Made the QuickBooks DB27 user a member of the administrators group
--Changed the QuickBooks DB27 service to run as Local System and gave it the ability to interact with the desktop.
--Changed QBCFMonitorService, QBIDPService, and QuickBooksDB27 service to all log in as the domain administrator account.  
--Disabled UAC in the registry.
--Server has been rebooted as needed throughout the process.  


I'm about out of ideas at this point.
QuickBooksRemote Access

Avatar of undefined
Last Comment
Michael A

8/22/2022 - Mon
John

Are you using the Server Manager from the QB Enterprise ISO or disk?  That is the first thing I would try.
John

Also there is more than one QB Service on the Server. Make sure all are running as a local (admin) service.
SINC_dmack

ASKER
I don't follow what you're asking, John.  Using Server Manager from where, for what?
Experts Exchange is like having an extremely knowledgeable team sitting and waiting for your call. Couldn't do my job half as well as I do without it!
James Murphy
SINC_dmack

ASKER
Oh wait, you must be referring to the Quickbooks Database Server Manager.  The tech who installed all of the versions of Quickbooks said that he always selected "I will be storing my company file on this computer and running Quickbooks on this computer", with the expectation that it would not install the DB Manager.  However, the DB Manager is definitely present.  It is 16.0.0.2038 (32-bit).  

It was blank under "add the folders containing your company files" so I added C:\quickbooks and hit Start Scan.  It says "Quickbooks Enterprise Solutions 17.0 Server Running.  Network Diagnostics: Repair successful!".  But when I log in as the user in question, it gives the same permissions error as from my first post.
John

On the QB disk (ISO), one of the programs say QB No license need. That is the server manager. You need that program installed on the server and you need the one from the QB Enterprise disk.
John

I think at this point you should contact Intuit Support.

You can also run the Intuit Network Diagnostics to see if you have a firewall or antivirus issue.  That could cause what you see.
⚡ FREE TRIAL OFFER
Try out a week of full access for free.
Find out why thousands trust the EE community with their toughest problems.
SINC_dmack

ASKER
It's not a Windows firewall issue (turning it off has no effect) or an antivirus issue (it's not installed).

Intuit support, from what I've found thus far, is likely just going to suggest that I give the user administrative-level permissions, which isn't going to be an acceptable permanent solution.  https://community.intuit.com/questions/1347986-error-code-12-0
SOLUTION
John

THIS SOLUTION ONLY AVAILABLE TO MEMBERS.
View this solution by signing up for a free trial.
Members can start a 7-Day free trial and enjoy unlimited access to the platform.
See Pricing Options
Start Free Trial
GET A PERSONALIZED SOLUTION
Ask your own question & get feedback from real experts
Find out why thousands trust the EE community with their toughest problems.
Knightsman

So, it sounds like its setup all wrong.  You will not get quickbooks to work properly this way.  
You have users remoting into the server to access Quickbooks, but restricting the C Drive, Quickbooks will not operate this way.  What they really should have is quickbooks installed on their local machines.  Those machines then connect to the server which you will have Quickbooks database server manager installed on.

You need to completely uninstall quickbooks from the server using these instructions: https://support.sonicwall.com/kb/sw4535
Then reinstall and use the 3rd option.  NOT using quickbooks but storing it.  Create a network shared folder, and set the permissions, and designate Quickbooks database server manager to it.  
Then on the users workstation, open the quickbooks file you plan to open, just remember to open it in multi user mode if you plan on having multiple users on at the same time.
ASKER CERTIFIED SOLUTION
SINC_dmack

THIS SOLUTION ONLY AVAILABLE TO MEMBERS.
View this solution by signing up for a free trial.
Members can start a 7-Day free trial and enjoy unlimited access to the platform.
See Pricing Options
Start Free Trial
⚡ FREE TRIAL OFFER
Try out a week of full access for free.
Find out why thousands trust the EE community with their toughest problems.
John

That sounds complicated. My users either use Premier or Enterprise but not both at the same time.

Keeping Enterprise separate on its own server is probably the best solution.
Experts Exchange has (a) saved my job multiple times, (b) saved me hours, days, and even weeks of work, and often (c) makes me look like a superhero! This place is MAGIC!
Walt Forbes
SINC_dmack

ASKER
This particular client is an accounting office that provides hosted Quickbooks services for its customers, through an RDS server that we host for them.  They plan to attempt to migrate the new customer that is currently using Enterprise to Premier, as they said that having multi-user-access disabled is not plausible, and they also don't want the expense of a second RDS server.  Thanks again for your input!
SINC_dmack

ASKER
John's suggestion to contact Intuit support led me to Intuit support providing a partial solution and enhancing my understanding of the problem.
John

You are very welcome and I was pleased to help you with this.
⚡ FREE TRIAL OFFER
Try out a week of full access for free.
Find out why thousands trust the EE community with their toughest problems.
Michael A

Hi does anyone know if Intuit have this terminal server limitation documented on their website?  I read the part that they do not assist with connectivity issues which is fair enough, but if the software would not work properly (@Knightsman) it seems like something they should mention