PDC Only Admin?

[spacebass5000]

Long story short...

I have a Windows 2003 Server that is utilizing a local Active Directory. I have QuickBooks Premier installed on it and am attempting to run this program when Remotely Connected. Problem is, any user that wants to run QB's must have administrative prividges in order to do so. *sigh*

So what I would like to do is simply grant a user administrative privilidges on this server alone and nothing else. Currently I have this user in the "Domain Admins" group and am able to run QB's. As you can see, I don't want this user having Admin rights domain-wide.

How do I go about doing this?

 

[ShackDaddy]

Have another system that the user connects to remotely (using Remote Desktop Client) instead of the DC. Keep the QB database file in a share on the server and have the client run QB on the other system, pointing QB at the share on the server.

To connect remotely directly to the server requires Domain Admin rights. You cannot get around that. Microsoft made sure of that so that they could enforce the purchase of Terminal Server client licenses.

ShackDaddy

 

[spacebass5000]

well, if I place a user in the "Remote Operators" group they can connect remotely...

I appreciate the help but that seems like too much of a hassle at present.

Gah... I can't believe a piece of software would make you have Administrative rights to run it. I could see if it were tied into the system's functionality somehow but this is ridiculous. It's a damn database and it's front-end, why the need for admin rights?

but I digress...

 

[bofhrevenge2]

What areas need admin rights can you find out which directories require this and give the user admin rights on just those directories?

"Sometimes, a cigar is just a cigar." - Sigmund Freud

 

[ShackDaddy]

Maybe I'm misunderstanding you, spacebass. Is the server hosting the front-end of QB, or the backend? Are they connecting via Remote Desktop Client to the server? Is your server running Terminal Services in Application mode or Administration Mode?

If you are merely using the server as a file server and not trying to grant clients the ability to run apps on the server, then this isn't an issue. But there are two possible whammys in store for you if you try to run apps on that server with a non-Admin account. The first is the policy that prevents non-Admins from logging on at all, regardless of whether it's a remote connection or not. That policy can be changed. The second whammy is the fact that a server in Admin mode won't accept remote connections from non-admins.

It sounds like you are successfully connecting and then QB won't run. Is that true? If so, I'll take another angle at answering your question.

 

[aquias]

http://www.palmersoft.co.uk/main.asp?content=runasuser

 

[karmic]

I tried this as well, the only quickbooks that's supported by terminal server is enterprise...

http://www.quickbooks.com/support/faqs/qbw2003/124603.html

Run as admin is the only way I could get it working too...

I'm gonna have a peek at the runas software tho, didn't know about that one...

~ K.I.S.S - Don't make it any more complex than it has to be ~

 

[spacebass5000]

Maybe I'm misunderstanding you, spacebass. Is the server hosting the front-end of QB, or the backend? Are they connecting via Remote Desktop Client to the server? Is your server running Terminal Services in Application mode or Administration Mode?

If you are merely using the server as a file server and not trying to grant clients the ability to run apps on the server, then this isn't an issue. But there are two possible whammys in store for you if you try to run apps on that server with a non-Admin account. The first is the policy that prevents non-Admins from logging on at all, regardless of whether it's a remote connection or not. That policy can be changed. The second whammy is the fact that a server in Admin mode won't accept remote connections from non-admins.

It sounds like you are successfully connecting and then QB won't run. Is that true? If so, I'll take another angle at answering your question.

Sorry so long to reply...

I am connecting via Remote Desktop Connection (aka Terminal Services) as a user in the "Remote Operators" group. I am then executing the QB's front-end and accessing the data file (that is also located on the server).

I will look into the "runas" lead you all gave me.

Thanks for everyone's help! I will report back before too long to let you all know what I have found.

 

[renderfarmer]

http://www.sbslinks.com/lua2.htm