Windows Vista Forums
Vista Forums Home Join Vista Forums Windows 7 Forum Vista Tutorials Tags
Welcome to Windows Vista Forums. Our forum is dedicated to helping you find solutions with any problems, errors or issues you are experiencing with Windows Vista. The Vista forum also covers news and updates and has an extensive Windows Vista tutorial section that covers a wide range of tips and tricks.

Go Back   Vista Forums > Misc Newsgroups > Indigo

Vista - Enabling Port Sharing on a DC requires Admin privileges?

 
 
Old 06-06-2006   #1 (permalink)
TelventRTD


 
 

Enabling Port Sharing on a DC requires Admin privileges?

Hi,

We have a WCF service that uses port sharing through the Net.Tcp Port
Sharing Service. This works well on non-DC computers when the WCF service is
run as a non-Domain Admin user. When we run the WCF service on a DC, we find
that the user running the service has to be a member of the Domain Admins
group to run successfully. If the service runs as a non-Domain Admin user
then this only works when Port Sharing is not used.

The error message we get when trying to use port sharing as a non-Domain
Admin is:
FATAL Exception: The TransportManager failed to listen on the supplied Uri
using the NetTcpPortSharing service: failed to read the service's endpoint
(5).

The Net.Tcp Port Sharing Service is running as Local Service (the default).
We're assuming that somehow, on a DC, the Net.Tcp service is unable to assign
the pass the endpoint over to the WCF service unless the WCF service is a
Domain Admin.

We really don't want the WCF service to have to run as a member of Domain
Admins. Is there some permission or policy we need to set to allow port
sharing for services that aren't running with Domain Admin privilege?

Thanks,

Corvil Howells
Telvent

My System SpecsSystem Spec
Old 06-07-2006   #2 (permalink)
TelventRTD


 
 

RE: Enabling Port Sharing on a DC requires Admin privileges?

So I've found the solution through other channels. For those who have the
same problem:

- Edit C:\WINDOWS\WinFX\v3.0\Windows Communication
Foundation\SMSvcHost.exe.config and add the following config section:

<configuration>
<system.serviceModel.activation>
<net.tcp>
<allowAccounts>
<add securityIdentifier="S-1-5-your sid here"/>
</allowAccounts>
</net.tcp>
</system.serviceModel.activation>
.....
</configuration>

Basically, replace "S-1-5-your sid here" with the SID of the non-domain
admin group/user that you want to be able to use for running the WCF service
on the DC.

This seemed to work fine for us.

Corvil Howells
Telvent

"TelventRTD" wrote:

> Hi,
>
> We have a WCF service that uses port sharing through the Net.Tcp Port
> Sharing Service. This works well on non-DC computers when the WCF service is
> run as a non-Domain Admin user. When we run the WCF service on a DC, we find
> that the user running the service has to be a member of the Domain Admins
> group to run successfully. If the service runs as a non-Domain Admin user
> then this only works when Port Sharing is not used.
>
> The error message we get when trying to use port sharing as a non-Domain
> Admin is:
> FATAL Exception: The TransportManager failed to listen on the supplied Uri
> using the NetTcpPortSharing service: failed to read the service's endpoint
> (5).
>
> The Net.Tcp Port Sharing Service is running as Local Service (the default).
> We're assuming that somehow, on a DC, the Net.Tcp service is unable to assign
> the pass the endpoint over to the WCF service unless the WCF service is a
> Domain Admin.
>
> We really don't want the WCF service to have to run as a member of Domain
> Admins. Is there some permission or policy we need to set to allow port
> sharing for services that aren't running with Domain Admin privilege?
>
> Thanks,
>
> Corvil Howells
> Telvent

My System SpecsSystem Spec
 

Thread Tools


Similar Threads
Thread Forum
RemoteDesktop: are admin privileges different? Vista General
Lost admin privileges Vista account administration
locked out of admin privileges. Vista account administration
New install: I need ADMIN privileges (and other help) Vista General
How to get FULL Admin privileges Vista security


Vista Forums is an independent web site and has not been authorized,
sponsored, or otherwise approved by Microsoft Corporation.
"Windows Vista", the Start Orb, and related materials are trademarks of Microsoft Corp.
© Designer Media Ltd

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46