0

I've been struggling to launch a process started under Local System Account (via remote deployment service) under another registered user account. I've followed these steps:

http://msdn.microsoft.com/en-us/library/windows/desktop/aa379608%28v=vs.85%29.aspx

And it works on my local XP-machine. I.e. my process is started from the registered user account and executes everything in the right context. But one of the users (also on XP) has issues, getting error code 5 after CreateProcessAsUser. I cannot reproduce this and am trying to investigate why this is happening. Interestingly I even removed the permissions to Read/Execute for my registered admin on a specific folder I've got my exe in, but it still runs everything, so I'm not quite sure where to look to find the source of the problem. I would appreciate any advice in which direction to look in order to resolve this. Maybe you've had similar experience and managed to find a way how to resolve this?

Thanks!

PS I'm simulating local system admin via psexec /si cmd

4

1 に答える 1

1

最終的な問題は、ローカル システム アカウントに対するローカル セキュリティ ポリシーの制限 + プロセスの開始を許可されたトークンに対するすべての特権を有効にすることでした。SCCM に関しては、MSDN の例に完全に従い、SCCM パッケージで対話を有効にすると、問題なく動作しました。

于 2014-03-10T14:02:21.183 に答える