|
User
|
An existing Windows user account
|
|
Domain
|
Logon-domain/host. If left blank an attempt will be made to detect the appropriate domain/host.
|
|
Password
|
Important Note: These passwords are stored weakly encrypted in service definition files. It's recommended to protect them i.e. by assigning appropriate NTFS rights to service definition files.
|
|
Logon / Impersonate
|
Specified user is logged on locally before the application is started, however the application is executed in the context of the service start account. Output files as well as log files inherit the security context of the specified user.
|
|
Run Process As User
|
Specified user is logged on locally, user's profile is loaded (does *not include drive mappings), and in interactive services access to the default desktop is accomplished. The application is then started in the context of the user specified above. Output files as well as log files inherit the security context of the specified user.
|
|
Requirements 1) The Service Start Account must have the following four local privileges assigned: - "Act as part of the operating system" - "Increase quotas" or "Adjust memory quotas for a process" - "Replace a process level token" - "Log on as a service" These privileges are by default assigned to the LocalSystem. 2) Users to be logged on must have at least local privilege "Log on as a batch job" assigned which is *not granted by default. Remarks It's recommended to use the feature in combination with an interactive service, otherwise window-applications won't be closed gracefully but terminated. If you run in any problem, it's most likely due to a user rights problem. In the first place take a look at the log, if anything went wrong with authorization or starting the process it will be logged. Play with the rights and see what changes. Also make sure that the application uses UNC type paths if it requires access to network files, and pay special attention to NTFS rights as well. On W2K Server, W2K3 and XP Pro the Task Manager shows the account a process is executed in. See also: How to run Notepad in a different user account | |
NT Wrapper v1.06 - May 13, 2005
Copyright © 2002- 2005 P.Pohman
NT Wrapper Home

