Wouldn't an administrator normally have these privileges? Also as mentioned I am currently running as an app due to the 2008 issues of running as a service. I know that I would not need that box checked and have it unchecked now. I assume however it should still work.
Jason Passow Network Administrator Mississippi Welders Supply http://www.mwsco.com (http://www.mwsco.com) [email protected] (mailto:[email protected]) ph: (507) 494-5178 fax: (507) 454-8104 -------------------------------------------------------------------------------- From: Dirk Bulinckx [mailto:[email protected]] To: Servers Alive Discussion List [mailto:[email protected]] Sent: Thu, 12 Jan 2012 11:30:22 -0600 Subject: RE: [SA-list] Error 1314 If you run it as service, then the user should already have enough rights to do this. The user running SA needs Act as part of the operating system Replace a process level token Increase quotas priviledges IF you want to be able to start an app (or batch or â¦) as a different user. Dirk Bulinckx. Network Monitoring by Servers Alive - http://www.woodstone.nu (http://www.woodstone.nu) DNS Hosting with ipv4 and ipv6 on http://www.stellardns.com (http://www.stellardns.com) From: Servers Alive Discussion List [mailto:[email protected] (mailto:[email protected])] On Behalf Of Jason Passow Sent: Thursday, January 12, 2012 6:16 PM To: Servers Alive Discussion List Subject: [SA-list] Error 1314 When running a command to restart a remote instance (in this case a batch file) I get the following eror: Execute command (with credentials): CreateProcessAsUser() failed with error 1314 >From some brief reading on the web in attempts to solve the issue I see the >following reference from here http://msdn.microsoft.com/en-us/library/ms682429%28VS.85%29.aspx (http://msdn.microsoft.com/en-us/library/ms682429%28VS.85%29.aspx) Typically, the process that calls the CreateProcessAsUser function must have the SE_ASSIGNPRIMARYTOKEN_NAME and SE_INCREASE_QUOTA_NAME privileges. If this function fails with ERROR_PRIVILEGE_NOT_HELD (1314), use the CreateProcessWithLogonW function instead. CreateProcessWithLogonW requires no special privileges, but the specified user account must be allowed to log on interactively. Generally, it is best to use CreateProcessWithLogonW to create a process with alternate credentials. This is running version 2460 on a windows 7 box. I know that Server 2008 and Windows 7 are not yet supported. I have it running as an application right now running as a domain administrator. Jason Passow Network Administrator Mississippi Welders Supply http://www.mwsco.com (http://www.mwsco.com) [email protected] (mailto:[email protected]) ph: (507) 494-5178 fax: (507) 454-8104 To unsubscribe send a message with UNSUBSCRIBE in the subject line to [email protected] (mailto:[email protected]) If you use auto-responders (like out-of-the-office messages), make sure that they are not sent to the list nor to individual members. Doing so will cause you to be automatically removed from the list. To unsubscribe send a message with UNSUBSCRIBE in the subject line to [email protected] (mailto:[email protected]) If you use auto-responders (like out-of-the-office messages), make sure that they are not sent to the list nor to individual members. Doing so will cause you to be automatically removed from the list. To unsubscribe send a message with UNSUBSCRIBE in the subject line to [email protected] If you use auto-responders (like out-of-the-office messages), make sure that they are not sent to the list nor to individual members. Doing so will cause you to be automatically removed from the list.
