Windows Vista Forums
Vista Forums Home Join Vista Forums Webcasts Vista Tutorials Tags

Welcome to Vista Forums we are your forum to discuss Windows Vista x64 and x86 systems. Whether you need help or just want to post an idea you have on Vista, this is the forum for you.
Register at Vista forums...the world biggest Windows Vista resource Join Vista Forums Now

Go Back   Vista Forums > Microsoft Technical Newsgroups > Indigo

Enabling Port Sharing on a DC requires Admin privileges?

Update your Vista Drivers Update Your Drivers Now!!
 
 
Thread Tools Display Modes
Old 06-06-2006   #1 (permalink)
TelventRTD
Guest


 

Enabling Port Sharing on a DC requires Admin privileges?

Hi,

We have a WCF service that uses port sharing through the Net.Tcp Port
Sharing Service. This works well on non-DC computers when the WCF service is
run as a non-Domain Admin user. When we run the WCF service on a DC, we find
that the user running the service has to be a member of the Domain Admins
group to run successfully. If the service runs as a non-Domain Admin user
then this only works when Port Sharing is not used.

The error message we get when trying to use port sharing as a non-Domain
Admin is:
FATAL Exception: The TransportManager failed to listen on the supplied Uri
using the NetTcpPortSharing service: failed to read the service's endpoint
(5).

The Net.Tcp Port Sharing Service is running as Local Service (the default).
We're assuming that somehow, on a DC, the Net.Tcp service is unable to assign
the pass the endpoint over to the WCF service unless the WCF service is a
Domain Admin.

We really don't want the WCF service to have to run as a member of Domain
Admins. Is there some permission or policy we need to set to allow port
sharing for services that aren't running with Domain Admin privilege?

Thanks,

Corvil Howells
Telvent

My System SpecsSystem Spec
Old 06-07-2006   #2 (permalink)
TelventRTD
Guest


 

RE: Enabling Port Sharing on a DC requires Admin privileges?

So I've found the solution through other channels. For those who have the
same problem:

- Edit C:\WINDOWS\WinFX\v3.0\Windows Communication
Foundation\SMSvcHost.exe.config and add the following config section:

<configuration>
<system.serviceModel.activation>
<net.tcp>
<allowAccounts>
<add securityIdentifier="S-1-5-your sid here"/>
</allowAccounts>
</net.tcp>
</system.serviceModel.activation>
.....
</configuration>

Basically, replace "S-1-5-your sid here" with the SID of the non-domain
admin group/user that you want to be able to use for running the WCF service
on the DC.

This seemed to work fine for us.

Corvil Howells
Telvent

"TelventRTD" wrote:

> Hi,
>
> We have a WCF service that uses port sharing through the Net.Tcp Port
> Sharing Service. This works well on non-DC computers when the WCF service is
> run as a non-Domain Admin user. When we run the WCF service on a DC, we find
> that the user running the service has to be a member of the Domain Admins
> group to run successfully. If the service runs as a non-Domain Admin user
> then this only works when Port Sharing is not used.
>
> The error message we get when trying to use port sharing as a non-Domain
> Admin is:
> FATAL Exception: The TransportManager failed to listen on the supplied Uri
> using the NetTcpPortSharing service: failed to read the service's endpoint
> (5).
>
> The Net.Tcp Port Sharing Service is running as Local Service (the default).
> We're assuming that somehow, on a DC, the Net.Tcp service is unable to assign
> the pass the endpoint over to the WCF service unless the WCF service is a
> Domain Admin.
>
> We really don't want the WCF service to have to run as a member of Domain
> Admins. Is there some permission or policy we need to set to allow port
> sharing for services that aren't running with Domain Admin privilege?
>
> Thanks,
>
> Corvil Howells
> Telvent

My System SpecsSystem Spec
 

Thread Tools
Display Modes



Similar Threads
Thread Thread Starter Forum Replies Last Post
Lost admin privileges computershy Vista account administration 1 03-26-2008 09:25 AM
locked out of admin privileges. zakkz Vista account administration 0 12-15-2007 03:23 PM
New install: I need ADMIN privileges (and other help) nunamoose Vista General 1 11-03-2007 08:29 PM
How to get FULL Admin privileges toreddie Vista security 6 10-01-2007 05:56 PM
Root Admin Privileges czantis Vista account administration 1 09-01-2007 10:14 PM


Vistax64.com is an independent web site and has not been authorized,
sponsored, or otherwise approved by Microsoft Corporation.
"Windows Vista", the Start Orb, and related materials are trademarks of Microsoft Corp.
© Designer Media 2005-2008

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51