Re: Win2008 - admin priviliges

* Michal Kawecki wrote, W dniu 2010-01-09 17:02:
> Dnia Sat, 09 Jan 2010 16:43:45 +0100, Bartek napisał(a):
>
>>> "Bartek" <bart_usWYTNIJTO@poczta.onet.pl> wrote in message
>>> news:2fb9.0000019a.4b4894ca@newsgate.onet.pl...
>>>> Witam
>>>> Jeden z naszych programow ksiegowych wymaga praw administratora przy
>>>> uruchaminiu.
>>>> Czy jest jakis trik zeby user domain go uruchomili? najlepiej jeszce jako
>>>> RemoteApp... Program to SKP www.format.wroc.pl
>>> Najpierw spróbuj określić dlaczego wymaga uprawnień administratora.
>>>
>>> k
>>>
>> Haaa, no wlasnie nie bardzo wiem jak... program chodzi tylko na plikach ze
>> swojego katalogu.. jest jakas aplikacja ktora mi pomoze trobleshootowac ten problem?
>
> Np. Process Monitor i Process Explorer z Sysinternals.

no to chyba mam duzy problem... :(
aplikacja na prawach domain user:

20:21:12,4937880 SKP.EXE 5392 Process Start SUCCESS Parent PID: 3436
20:21:12,4938256 SKP.EXE 5392 Thread Create SUCCESS Thread ID: 4936
20:21:12,6178389 SKP.EXE 5392 QueryNameInformationFile C:\_storage\programs\SKP\2009\SKP.EXE SUCCESS Name: \_storage\programs\SKP\2009\SKP.EXE
20:21:12,6183460 SKP.EXE 5392 Load Image C:\Windows\System32\ntdll.dll SUCCESS Image Base: 0x772d0000, Image Size: 0x1ab000
20:21:12,6187252 SKP.EXE 5392 Load Image C:\Windows\SysWOW64\ntdll.dll SUCCESS Image Base: 0x774b0000, Image Size: 0x180000
20:21:12,6188106 SKP.EXE 5392 Thread Exit SUCCESS Thread ID: 4936, User Time: 0.0000000, Kernel Time: 0.0000000
20:21:12,6192687 SKP.EXE 5392 Process Exit SUCCESS Exit Status: -1073740756, User Time: 0.0000000 seconds, Kernel Time:

i aplikacja prosi o autoryzacje admina..

a tak sie zachowuje gdy uruchamia domain admin:

SKP.EXE Process Start SUCCESS
SKP.EXE Thread Create SUCCESS
SKP.EXE QueryNameInformationFile C:\_storage\programs\SKP\2009\SKP.EXE SUCCESS
SKP.EXE Load Image C:\_storage\programs\SKP\2009\SKP.EXE SUCCESS
SKP.EXE Load Image C:\Windows\System32\ntdll.dll SUCCESS
SKP.EXE Load Image C:\Windows\SysWOW64\ntdll.dll SUCCESS
SKP.EXE CreateFile C:\Windows SUCCESS
SKP.EXE QueryOpen C:\Windows\System32\wow64.dll FAST IO DISALLOWED
SKP.EXE CreateFile C:\Windows\System32\wow64.dll SUCCESS
SKP.EXE QueryBasicInformationFile C:\Windows\System32\wow64.dll SUCCESS
SKP.EXE CloseFile C:\Windows\System32\wow64.dll SUCCESS
SKP.EXE QueryOpen C:\Windows\System32\wow64win.dll FAST IO DISALLOWED
SKP.EXE CreateFile C:\Windows\System32\wow64win.dll SUCCESS
SKP.EXE QueryBasicInformationFile C:\Windows\System32\wow64win.dll SUCCESS
SKP.EXE CloseFile C:\Windows\System32\wow64win.dll SUCCESS
SKP.EXE CreateFile C:\Windows\System32\wow64win.dll SUCCESS
SKP.EXE CreateFileMapping C:\Windows\System32\wow64win.dll FILE LOCKED WITH ONLY READERS
SKP.EXE CreateFileMapping C:\Windows\System32\wow64win.dll SUCCESS
SKP.EXE Load Image C:\Windows\System32\wow64win.dll SUCCESS
SKP.EXE CloseFile C:\Windows\System32\wow64win.dll SUCCESS
SKP.EXE CreateFile C:\Windows SUCCESS
SKP.EXE QueryNameInformationFile C:\Windows SUCCESS
SKP.EXE CloseFile C:\Windows SUCCESS
SKP.EXE QueryOpen C:\_storage\programs\SKP\2009\tsappcmp.dll FAST IO DISALLOWED
SKP.EXE CreateFile C:\_storage\programs\SKP\2009\tsappcmp.dll NAME NOT FOUND
SKP.EXE QueryOpen C:\Windows\SysWOW64\TSAPPCMP.dll FAST IO DISALLOWED
SKP.EXE CreateFile C:\Windows\SysWOW64\TSAPPCMP.dll SUCCESS
SKP.EXE QueryBasicInformationFile C:\Windows\SysWOW64\TSAPPCMP.dll SUCCESS
SKP.EXE CloseFile C:\Windows\SysWOW64\TSAPPCMP.dll SUCCESS
SKP.EXE CreateFile C:\Windows\SysWOW64\TSAPPCMP.dll SUCCESS
SKP.EXE CreateFileMapping C:\Windows\SysWOW64\TSAPPCMP.dll FILE LOCKED WITH ONLY READERS
SKP.EXE CreateFileMapping C:\Windows\SysWOW64\TSAPPCMP.dll SUCCESS
SKP.EXE Load Image C:\Windows\SysWOW64\TSAPPCMP.dll SUCCESS
SKP.EXE CloseFile C:\Windows\SysWOW64\TSAPPCMP.dll SUCCESS

wychodzi na ze skp otwiera pliki systemowe w trybie do zapisu...
no i moje kolejne pytanie: mozna uzytkownikom nadac prawa zapisu do katalogu z systemem?
Received on Sun Jan 10 20:40:04 2010