RSOP Planning Security problem


  1.    17 Jul 2008 #1
    Wake-Up-Jeff Guest

    RSOP Planning Security problem


    I've been trying to do some RSOP Planning using a non-admin user account on
    a domain member workstation.
    I am using the following VBScript code:

    strComputer = "DC1"
    Set locator = CreateObject("WbemScripting.SWbemLocator")
    Set connection = locator.ConnectServer (strComputer, "root\rsop", null,
    null, null, null, 0, null)
    (for the ConnectServer parameters, see
    http://msdn.microsoft.com/en-us/libr...20(VS.85).aspx)

    When I logon to the workstation as an administrator - no problem executing
    the script.
    When I use a non-admin account, I get an error 80070005 access denied
    message executing line 3.

    I have used the wmimgmt.msc mmc to set permissions on Root\RSOP for
    "Authenticated Users" to the same as "Administrators" for "this namespace
    and subnamespaces".

    I have also granted "Authenticated Users" permission for "RSOP Planning" and
    "RSOP Logging" on the OU which contains the workstation account.

    What permissions am I missing???


      My System SpecsSystem Spec

  2.    18 Jul 2008 #2
    Alan Mosley Guest

    Re: RSOP Planning Security problem


    why not pass credentuals to the locator.connectServer object?
    if you dont want people to open and see credentual econde it with windows
    script encoder

    "Wake-Up-Jeff" <artvandal8@xxxxxx> wrote in message
    news:%235%234QNH6IHA.4352@xxxxxx

    > I've been trying to do some RSOP Planning using a non-admin user account
    > on a domain member workstation.
    > I am using the following VBScript code:
    >
    > strComputer = "DC1"
    > Set locator = CreateObject("WbemScripting.SWbemLocator")
    > Set connection = locator.ConnectServer (strComputer, "root\rsop", null,
    > null, null, null, 0, null)
    > (for the ConnectServer parameters, see
    > http://msdn.microsoft.com/en-us/libr...20(VS.85).aspx)
    >
    > When I logon to the workstation as an administrator - no problem executing
    > the script.
    > When I use a non-admin account, I get an error 80070005 access denied
    > message executing line 3.
    >
    > I have used the wmimgmt.msc mmc to set permissions on Root\RSOP for
    > "Authenticated Users" to the same as "Administrators" for "this namespace
    > and subnamespaces".
    >
    > I have also granted "Authenticated Users" permission for "RSOP Planning"
    > and "RSOP Logging" on the OU which contains the workstation account.
    >
    > What permissions am I missing???
    >
    >

      My System SpecsSystem Spec

  3.    20 Jul 2008 #3
    Wake-Up-Jeff Guest

    Re: RSOP Planning Security problem


    I want it to run in the credentials of the logged on user.
    I don't want to have to pass separate credentials.
    This would mean maintaining a separate account just for this purpose.
    Besides, the credentials have to be those of an administrator.
    I should be able to get this to work for a non-admin user.

    "Alan Mosley" <me@xxxxxx> wrote in message
    news:OiPh%23$K6IHA.3696@xxxxxx

    > why not pass credentuals to the locator.connectServer object?
    > if you dont want people to open and see credentual econde it with windows
    > script encoder
    >
    > "Wake-Up-Jeff" <artvandal8@xxxxxx> wrote in message
    > news:%235%234QNH6IHA.4352@xxxxxx

    >> I've been trying to do some RSOP Planning using a non-admin user account
    >> on a domain member workstation.
    >> I am using the following VBScript code:
    >>
    >> strComputer = "DC1"
    >> Set locator = CreateObject("WbemScripting.SWbemLocator")
    >> Set connection = locator.ConnectServer (strComputer, "root\rsop", null,
    >> null, null, null, 0, null)
    >> (for the ConnectServer parameters, see
    >> http://msdn.microsoft.com/en-us/libr...20(VS.85).aspx)
    >>
    >> When I logon to the workstation as an administrator - no problem
    >> executing the script.
    >> When I use a non-admin account, I get an error 80070005 access denied
    >> message executing line 3.
    >>
    >> I have used the wmimgmt.msc mmc to set permissions on Root\RSOP for
    >> "Authenticated Users" to the same as "Administrators" for "this namespace
    >> and subnamespaces".
    >>
    >> I have also granted "Authenticated Users" permission for "RSOP Planning"
    >> and "RSOP Logging" on the OU which contains the workstation account.
    >>
    >> What permissions am I missing???
    >>
    >>
    >
    >

      My System SpecsSystem Spec

  4.    30 Jul 2008 #4
    ThatsIT.net.au Guest

    Re: RSOP Planning Security problem



    "Wake-Up-Jeff" <artvandal8@xxxxxx> wrote in message
    news:eMrClql6IHA.3480@xxxxxx

    >I want it to run in the credentials of the logged on user.
    > I don't want to have to pass separate credentials.
    > This would mean maintaining a separate account just for this purpose.
    thats correct, thats why you have accounts and permissions. or give the user
    permissions


    > Besides, the credentials have to be those of an administrator.
    > I should be able to get this to work for a non-admin user.
    >
    > "Alan Mosley" <me@xxxxxx> wrote in message
    > news:OiPh%23$K6IHA.3696@xxxxxx

    >> why not pass credentuals to the locator.connectServer object?
    >> if you dont want people to open and see credentual econde it with windows
    >> script encoder
    >>
    >> "Wake-Up-Jeff" <artvandal8@xxxxxx> wrote in message
    >> news:%235%234QNH6IHA.4352@xxxxxx

    >>> I've been trying to do some RSOP Planning using a non-admin user account
    >>> on a domain member workstation.
    >>> I am using the following VBScript code:
    >>>
    >>> strComputer = "DC1"
    >>> Set locator = CreateObject("WbemScripting.SWbemLocator")
    >>> Set connection = locator.ConnectServer (strComputer, "root\rsop", null,
    >>> null, null, null, 0, null)
    >>> (for the ConnectServer parameters, see
    >>> http://msdn.microsoft.com/en-us/libr...20(VS.85).aspx)
    >>>
    >>> When I logon to the workstation as an administrator - no problem
    >>> executing the script.
    >>> When I use a non-admin account, I get an error 80070005 access denied
    >>> message executing line 3.
    >>>
    >>> I have used the wmimgmt.msc mmc to set permissions on Root\RSOP for
    >>> "Authenticated Users" to the same as "Administrators" for "this
    >>> namespace and subnamespaces".
    >>>
    >>> I have also granted "Authenticated Users" permission for "RSOP Planning"
    >>> and "RSOP Logging" on the OU which contains the workstation account.
    >>>
    >>> What permissions am I missing???
    >>>
    >>>
    >>
    >>
    >
    >
      My System SpecsSystem Spec

RSOP Planning Security problem

Similar Threads
Thread Forum
Why Planning is important?
A small story will give a big meaning Why Planning is important? One Night 4 college students were playing till late night and could not study...
Chillout Room
RSOP Planning mode - Provider load failure.
I am having trouble performing RSOP Planning mode in a VB script. When I try to perform it, I get the error "Provider Load Failure" I am using a...
VB Script
GP's not applying, RSOP fails, Vista will not log off/shut down
When I try to run GPUPDATE, it hangs there and eventually says it has stopped responding. If I try to run RSOP it also stops responding. When I try...
Vista networking & sharing
GP will Not apply Rsop Will not run
Group policy will not apply policies, when I run GPUPDATE I get the following error Log Name: Application Source: Group Policy...
Vista General
Error Message "The client-side extension could not log RSoP data..
"The client-side extension could not log RSoP data because it failed with error code '0x8004401e <unknown-message-text>'." These messages are...
Vista General
Virtualization Planning
Hello, I am relatively new to virtualization. I want to come up with a plan that would allow me to virtualize the servers in my company. I want...
Virtual Server
Planning for Vista
The following pop to mind planning for Vista: 1. Integrated video might not be very pleasing with Vista. 2. 2GB of memory seems like a good place...
Vista General

Our Sites
  • Ten Forums
  • Eight Forums
  • Seven Forums
  • Help Me Bake
  • Site Links
  • Contact Us
  • Privacy and Cookies
  • About Us
    Windows Vista Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 10" and related materials are trademarks of Microsoft Corp.

    Designer Media Ltd
    All times are GMT -5. The time now is 21:56.
    .