View previous topic :: View next topic |
Author |
Message |
agressiv
Joined: 06 Oct 2002 Posts: 35
|
Posted: Tue Mar 11, 2003 4:06 pm Post subject: |
|
|
I'm trying to call a network resource within a vbscript. I am running hostmonitor as a service, which runs under the system context, but I have configured hostmonitor in Options->Startup->Service to use a domain admin account. Everything else works fine. (disk checks, UNC path stuff etc)
If I launch the app from Explorer, it works fine, since the logged on user has rights. It's ONLY when I launch it as a service that the external scripts are not running with a priveleged account, but all other functions ARE running with a priveleged account.
Greg
[ This Message was edited by: agressiv on 2003-03-11 15:07 ] |
|
Back to top |
|
|
KS-Soft
Joined: 03 Apr 2002 Posts: 12806 Location: USA
|
Posted: Tue Mar 11, 2003 8:20 pm Post subject: |
|
|
After investigation I can say that HostMonitor starts thread that correctly impersonates specified user. Problem is scripting engine starts another thread to process the script and this thread inherits application's permissions. We will try to find some workaround, but probably the only possible solution is to start service using another account (defined by standard Services utility).
Regards
Alex |
|
Back to top |
|
|
agressiv
Joined: 06 Oct 2002 Posts: 35
|
Posted: Tue Mar 11, 2003 8:52 pm Post subject: |
|
|
I can set the service itself to start as a Domain Admin, but I thought you said that wouldn't work?
Addition: Yep, no tray icon, so we wouldn't be able to modify anything.
[ This Message was edited by: agressiv on 2003-03-11 20:06 ] |
|
Back to top |
|
|
KS-Soft
Joined: 03 Apr 2002 Posts: 12806 Location: USA
|
Posted: Tue Mar 11, 2003 9:14 pm Post subject: |
|
|
I think it should work |
|
Back to top |
|
|
agressiv
Joined: 06 Oct 2002 Posts: 35
|
Posted: Wed Mar 12, 2003 8:47 am Post subject: |
|
|
Like I said, we wouldn't get the tray icon if we ran the service with Domain Admin, so we'd be better off running it as a console app, but I'm not too key on that.
If you find another workaround, let me know.
Thanks -
Greg |
|
Back to top |
|
|
|