Kbase P108666: How to start AdminServer if Progress is installed on mapped drive.
| Autor |
Progress Software Corporation - Progress |
| Acesso |
Público |
| Publicação |
24/10/2008 |
|
Status: Verified
GOAL:
How to start AdminServer if Progress is installed on mapped drive.
FACT(s) (Environment):
Progress 9.x
OpenEdge 10.x
Windows 2000
Windows 2000 Advanced Server
Windows XP
Windows 2003
CAUSE:
If Progress has been installed on a mapped drive, although this isn't recommended by Microsoft, the default account used by Windows to start an NT service will not be able to start the AdminService.
This would be true of any service. The default service used by Windows is the System or LocalSystem account.
Windows Security model doesn't give the System or LocalSystem account any rights on any other system.
The System or LocalSystem accounts do not have the security rights to access anything on a mapped drive because System or LocalSystem accounts can not be authenticated by a machine, even the machine they are running on should refuse to authenticate their access to a mapped drive even if the mapped drive is referring to a local hard drive.
FIX:
To configure a Windows 2000, XP or 2003 machine to allow the AdminServer to start when the AdminServer is configured to interact with a mapped drive.
1) Open up the Control Panels and then the Administative Tools folder
2) Within the Administrative Tools folder start the Local Security Policy tool.
3) Add the account you will be starting the AdminService as -- not System or LocalSystem to the following rights:
Act as part of the Operating System
Adjust memory quotas for a process
Create a token object
Log on as a batch job
Log on as a service
Replace a process level token
4) Close the Local Security Policy tool.
5) Within the Administrative Tools folder start the Services tool
6) Locate the AdminService listing for the version you wish to configure
7) Right mouse click the appropriate AdminService listing and select Properties
8) Select the Log On tab
9) Select the radio button to the left of the text "This Account"
10) Enter the correct account.
Example:
.\myaccount would refer to the myaccount account from this server machine
DOMAINNAME\myaccount would refer to the myaccount account from the domain named DOMAINNAME.
11) Remember to put in the correct password for that account
12) Click ok.
13) Start the AdminService
You should be able to use the Progress Explorer to connect to the AdminService and configure the AdminServer for your needs.