SINC_dmack
asked on
Quickbooks Enterprise 2017 gives "administrator permissions" error on Windows 2012 R2 RDS box.
We have an RDS server set up on Server 2012 R2. It has Quickbooks Desktop Enterprise Solutions: Accountant 17.0, Quickbooks Premier Accountant Edition 2016, and Quickbooks Premier Accountant Edition 2017 installed. There are fewer than 10 users.
The RDS users all have local accounts, though the RDS server is part of a domain. (We figured that by sticking with local accounts, that would ensure that the users had absolutely no access to any other network resources.) All of the RDS users are members of the Remote Desktop Users and Users groups.
The standard user is locked down and does not have access to browse the C: drive. When setting up each user, we left administrator access enabled, then opened the database files in Quickbooks so they would show up in the list of recently opened files, and then removed administrator access. This gave them the ability to open the database files through Quickbooks while restricting their ability to browse the C: drive.
The folder structure is a folder called Quickbooks located on the root of the C: drive, with subfolders for each user's company files. Each user is the owner of its respective folder, and Creator Owner has full control. Also, the local administrator, domain administrator, and system accounts have full control to the Quickbooks folder and all of its subfolders. The users cannot browse to any folders (through the Quickbooks file-open prompt) aside from their own folder.
The users who are using QB AE 2016 and 2017 do not have any problems. When the user who uses QB Enterprise 17.0 attempts to open a company file, the following error appears:
"This action requires Windows adminsitrator permissions." The choices are Continue or Cancel. Cancel, unsurprisingly, cancels the attempt to open the company file, and clicking Continue returns the following error:
"We're sorry. Quickbooks encountered a problem. Error codes: (-12, 0)."
If I make the problematic user a member of the administrators group, they are able to open their company files with no issues. After removing administrator permissions, the above errors return.
I have made the following changes (found during Google searches) with no effect:
--Made the QuickBooks DB27 user a member of the administrators group
--Changed the QuickBooks DB27 service to run as Local System and gave it the ability to interact with the desktop.
--Changed QBCFMonitorService, QBIDPService, and QuickBooksDB27 service to all log in as the domain administrator account.
--Disabled UAC in the registry.
--Server has been rebooted as needed throughout the process.
I'm about out of ideas at this point.
The RDS users all have local accounts, though the RDS server is part of a domain. (We figured that by sticking with local accounts, that would ensure that the users had absolutely no access to any other network resources.) All of the RDS users are members of the Remote Desktop Users and Users groups.
The standard user is locked down and does not have access to browse the C: drive. When setting up each user, we left administrator access enabled, then opened the database files in Quickbooks so they would show up in the list of recently opened files, and then removed administrator access. This gave them the ability to open the database files through Quickbooks while restricting their ability to browse the C: drive.
The folder structure is a folder called Quickbooks located on the root of the C: drive, with subfolders for each user's company files. Each user is the owner of its respective folder, and Creator Owner has full control. Also, the local administrator, domain administrator, and system accounts have full control to the Quickbooks folder and all of its subfolders. The users cannot browse to any folders (through the Quickbooks file-open prompt) aside from their own folder.
The users who are using QB AE 2016 and 2017 do not have any problems. When the user who uses QB Enterprise 17.0 attempts to open a company file, the following error appears:
"This action requires Windows adminsitrator permissions." The choices are Continue or Cancel. Cancel, unsurprisingly, cancels the attempt to open the company file, and clicking Continue returns the following error:
"We're sorry. Quickbooks encountered a problem. Error codes: (-12, 0)."
If I make the problematic user a member of the administrators group, they are able to open their company files with no issues. After removing administrator permissions, the above errors return.
I have made the following changes (found during Google searches) with no effect:
--Made the QuickBooks DB27 user a member of the administrators group
--Changed the QuickBooks DB27 service to run as Local System and gave it the ability to interact with the desktop.
--Changed QBCFMonitorService, QBIDPService, and QuickBooksDB27 service to all log in as the domain administrator account.
--Disabled UAC in the registry.
--Server has been rebooted as needed throughout the process.
I'm about out of ideas at this point.
John
Are you using the Server Manager from the QB Enterprise ISO or disk? That is the first thing I would try.
Also there is more than one QB Service on the Server. Make sure all are running as a local (admin) service.
ASKER
I don't follow what you're asking, John. Using Server Manager from where, for what?
ASKER
Oh wait, you must be referring to the Quickbooks Database Server Manager. The tech who installed all of the versions of Quickbooks said that he always selected "I will be storing my company file on this computer and running Quickbooks on this computer", with the expectation that it would not install the DB Manager. However, the DB Manager is definitely present. It is 16.0.0.2038 (32-bit).
It was blank under "add the folders containing your company files" so I added C:\quickbooks and hit Start Scan. It says "Quickbooks Enterprise Solutions 17.0 Server Running. Network Diagnostics: Repair successful!". But when I log in as the user in question, it gives the same permissions error as from my first post.
It was blank under "add the folders containing your company files" so I added C:\quickbooks and hit Start Scan. It says "Quickbooks Enterprise Solutions 17.0 Server Running. Network Diagnostics: Repair successful!". But when I log in as the user in question, it gives the same permissions error as from my first post.
On the QB disk (ISO), one of the programs say QB No license need. That is the server manager. You need that program installed on the server and you need the one from the QB Enterprise disk.
I think at this point you should contact Intuit Support.
You can also run the Intuit Network Diagnostics to see if you have a firewall or antivirus issue. That could cause what you see.
You can also run the Intuit Network Diagnostics to see if you have a firewall or antivirus issue. That could cause what you see.
ASKER
It's not a Windows firewall issue (turning it off has no effect) or an antivirus issue (it's not installed).
Intuit support, from what I've found thus far, is likely just going to suggest that I give the user administrative-level permissions, which isn't going to be an acceptable permanent solution. https://community.intuit.com/questions/1347986-error-code-12-0
Intuit support, from what I've found thus far, is likely just going to suggest that I give the user administrative-level permissions, which isn't going to be an acceptable permanent solution. https://community.intuit.com/questions/1347986-error-code-12-0
SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
So, it sounds like its setup all wrong. You will not get quickbooks to work properly this way.
You have users remoting into the server to access Quickbooks, but restricting the C Drive, Quickbooks will not operate this way. What they really should have is quickbooks installed on their local machines. Those machines then connect to the server which you will have Quickbooks database server manager installed on.
You need to completely uninstall quickbooks from the server using these instructions: https://support.sonicwall.com/kb/sw4535
Then reinstall and use the 3rd option. NOT using quickbooks but storing it. Create a network shared folder, and set the permissions, and designate Quickbooks database server manager to it.
Then on the users workstation, open the quickbooks file you plan to open, just remember to open it in multi user mode if you plan on having multiple users on at the same time.
You have users remoting into the server to access Quickbooks, but restricting the C Drive, Quickbooks will not operate this way. What they really should have is quickbooks installed on their local machines. Those machines then connect to the server which you will have Quickbooks database server manager installed on.
You need to completely uninstall quickbooks from the server using these instructions: https://support.sonicwall.com/kb/sw4535
Then reinstall and use the 3rd option. NOT using quickbooks but storing it. Create a network shared folder, and set the permissions, and designate Quickbooks database server manager to it.
Then on the users workstation, open the quickbooks file you plan to open, just remember to open it in multi user mode if you plan on having multiple users on at the same time.
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
That sounds complicated. My users either use Premier or Enterprise but not both at the same time.
Keeping Enterprise separate on its own server is probably the best solution.
Keeping Enterprise separate on its own server is probably the best solution.
ASKER
This particular client is an accounting office that provides hosted Quickbooks services for its customers, through an RDS server that we host for them. They plan to attempt to migrate the new customer that is currently using Enterprise to Premier, as they said that having multi-user-access disabled is not plausible, and they also don't want the expense of a second RDS server. Thanks again for your input!
ASKER
John's suggestion to contact Intuit support led me to Intuit support providing a partial solution and enhancing my understanding of the problem.
You are very welcome and I was pleased to help you with this.
Hi does anyone know if Intuit have this terminal server limitation documented on their website? I read the part that they do not assist with connectivity issues which is fair enough, but if the software would not work properly (@Knightsman) it seems like something they should mention