Run server side .exe from TeamSite UI

Platform: Windows 2000 SP4
TS Version: TS 6.5 SP2

Situation:

I'm trying to run an .exe that's on the server's C: drive from the TeamSite UI. The link has already been included in the UI. The link in the File menu points to ../iw-bin/wdpro_menu.ipl/xmlExtractor.ipl. The purpose of the xmlExtractor.ipl is to execute xmlExtractor.exe on the C: drive and return the results in HTML. The program executes fine when the user is the TS Master account and has Admin rights to the server, but when I execute it as a different user the program still gets executed, but I get access denied errors because it is running the program as the user logged into TeamSite which is not and Admin on the server.

Question:

Is there any way I can make the call to xmlExtractor.exe from the xmlExtractor.ipl as the TS Master and not the user who is logged into the TeamSite UI so that it can be executed by a user without Admin access to the machine?

Find more posts tagged with

Comments

nipper

Please fix your post

Use attachments if you are including a file.

Adam Stoller

Platform: Windows 2000 SP4
TS Version: TS 6.5 SP2

Situation:

I'm trying to run an .exe that's on the server's C: drive from the TeamSite UI. The link has already been included in the UI. The link in the File menu points to ../iw-bin/wdpro_menu.ipl/xmlExtractor.ipl. The purpose of the xmlExtractor.ipl is to execute xmlExtractor.exe on the C: drive and return the results in HTML. The program executes fine when the user is the TS Master account and has Admin rights to the server, but when I execute it as a different user the program still gets executed, but I get access denied errors because it is running the program as the user logged into TeamSite which is not and Admin on the server.

Question:

Is there any way I can make the call to xmlExtractor.exe from the xmlExtractor.ipl as the TS Master and not the user who is logged into the TeamSite UI so that it can be executed by a user without Admin access to the machine?

Just a thought - Have you tried without wdpro_menu.ipl?
I don't think it will really help, as I don't believe wdpro_menu.ipl does anything with regard to impersonation, but its worth a try (you may have to change the way you access form variable information though)

Alternatively, find a way to do what you want without Admin rights on the server...?

Kevin Butcher

Just a thought - Have you tried without wdpro_menu.ipl?
I don't think it will really help, as I don't believe wdpro_menu.ipl does anything with regard to impersonation, but its worth a try (you may have to change the way you access form variable information though)

Alternatively, find a way to do what you want without Admin rights on the server...?

I've tried to run it as an external task inside a workflow making he owner and creator of the job the admin user that I need the .exe to run as on the server. Even though the workflow owner and creator is hard coded for the TS Master, the .exe is still executing as the user who who started the workflow.

The .exe modifies files in one particular directory (i.e. C:/xmlExtractor). Since it creates, deletes, and modifies files and folders in that directory when it performs it's functions the server is challenging the user who started the .exe for admin rights. Unfortunately, I have no other way to do it.

Other Info:
The .exe itself is written in C#.NET 2.0.

If I check the security event viewer on the server after executing it as a user other than someone who is an admin on the box, I get the following:

Logon Failure:
Reason: The user has not been granted the requested
logon type at this machine
User Name: user name here
Domain: domain here
Logon Type: 2
Logon Process: Advapi
Authentication Package: MICROSOFT_AUTHENTICATION_PACKAGE_V1_0
Workstation Name: server name here

kg_brian

So on the server, add whatever user account iwov is using to run the commands as a local administrator...

Kevin Butcher

So on the server, add whatever user account iwov is using to run the commands as a local administrator...

TS is using the credentials of the user logged into TS. The problem is I want this to be available to multiple users who cannot login as the TS Master and should not be included as administrators of the box.

kg_brian

TS is using the credentials of the user logged into TS. The problem is I want this to be available to multiple users who cannot login as the TS Master and should not be included as administrators of the box.

There is a way to make it run as some kind of iw_deamon account that is made just for this purpose, but I can't think of how to do it right now...