Kbase P55926: Do not want to use Access=ALL for ProControl on Windows NT.
| Autor |
Progress Software Corporation - Progress |
| Acesso |
Público |
| Publicação |
12/30/2008 |
|
Status: Verified
GOAL:
Do not want to use Access=ALL for ProControl on Windows NT.
GOAL:
How to setup ProControl without using Access=ALL.
FACT(s) (Environment):
Windows
Progress 8.3x
Progress 9.x
FIX:
The ACCESS environment variable may be set to a user rather than "all" but the user must have 6 addition User Rights even if they are a member of the Administrators group, and they must be applied with the domain prefix or it will not work correctly.
The 6 additional rights required are:
-Log on as a Service
-Log on as a Batch Job.
-Act as part of the operating system.
-Increase quotas.
-Create a token object.
-Replace a process level token.
Add these rights using the MS User Manager for NT by selecting User Rights Policy and clicking on the Show Advanced User Rights. The user name must been entered including the domain name as shown below for the rights to be added properly:
domain-name\user-name
ProControl environment may then be set to the user name granted the rights above:
ACCESS=user-name