32 reputation
17
bio website
location
age
visits member for 1 year, 2 months
seen Dec 11 '13 at 20:38

Nov
26
awarded  Notable Question
Jun
12
awarded  Popular Question
Dec
8
comment Bizarre - Domain Admin has no rights to modify domain scripts directory
Just also confirmed - taking ownership (to Domain Admins) does NOT work! FS file add still works, UNC file add is still prevented (“You need permission to perform this action” - no additional information given).
Dec
8
comment Bizarre - Domain Admin has no rights to modify domain scripts directory
Grogan Jr - Both Enterprise Admins and Domain Admins have full control over the directories. Ownership, however, is set to Administrators (DOMAIN\Administrators); but this doesn’t explain why going through the file system works while going through the UNC path does not.
Dec
7
asked Bizarre - Domain Admin has no rights to modify domain scripts directory
Nov
27
accepted Running an administrative program under user account - domain edition
Nov
27
comment Running an administrative program under user account - domain edition
I have determined that service accounts wouldn’t help me with a normal program because RUNAS always expects a password anyhow, even when you trail a username with $. The only way around it is with a weird scheduled task hack. So I have abandoned service accounts anyhow, and have posted my answer to my original question. Thanks anyhow for your help, it was appreciated. I may come back to you later to get the services account debugged for actual scheduled tasks.
Nov
27
awarded  Teacher
Nov
27
answered Running an administrative program under user account - domain edition
Nov
23
awarded  Editor
Nov
22
comment Running an administrative program under user account - domain edition
When I examine all of the reference screenshots that show the service account, I have the exact same thing (just named differently) on my own server.
Nov
22
comment Running an administrative program under user account - domain edition
I followed each and every step on the page that I linked to. The page that you linked to seems to be not that much more extensive (at least, in terms of creating the service account), so I am not sure what you are talking about when you say it’s a “slimmed down” copy. The only point where I hit a roadblock is when I switched over to the client computer and attempted to import the service account - initially with the import command itself, but after your fine instructions above (to make the importing command function in the first place), with the importing of the service account as a whole.
Nov
21
comment Running an administrative program under user account - domain edition
First paragraph, yes. I am running a domain admin account on the computer in question when I do these operations, plus I am elevating a PS console when I do so. Second paragraph, not sure.
Nov
21
comment Running an administrative program under user account - domain edition
I have installed the RSAT tools, and while they allowed Import-Module ActiveDirectory to work, the importing of the actual service account still failed, as per the error message in this thread.
Nov
21
comment Running an administrative program under user account - domain edition
@TheCleaner - You’re talking about going to the Executable, pulling up the properties, and then checking off the checkbox that says “run this program as an administrator” under the compatibility tab, correct? If so, no dice - “740: The requested operation requires elevation”
Nov
21
comment Running an administrative program under user account - domain edition
@TheCleaner - just tried using a local admin account via RunAs. Same problem - “740: The requested operation requires elevation.” The same account used when the icon is just double-cicked works just fine.
Nov
21
comment Running an administrative program under user account - domain edition
Aw, dangnabbit: PS C:\Windows\system32> Install-ADServiceAccount Services Install-ADServiceAccount : Cannot install service account. Error Message: 'An unspecified error has occurred'. At line:1 char:1 + Install-ADServiceAccount Services + ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ + CategoryInfo : WriteError: (Services:String) [Install-ADServiceAccount], ADException + FullyQualifiedErrorId : InstallADServiceAccount:PerformOperation:InstallServiceAcccountFailure,Microsoft‌​.ActiveD irectory.Management.Commands.InstallADServiceAccount
Nov
21
comment Running an administrative program under user account - domain edition
looks like my Google-Fu could use a bit of improvement. Thank you for the link.
Nov
21
comment Running an administrative program under user account - domain edition
@TheCleaner - But that means watching and managing a local admin on every workstation that needs the software. That could end up being an absolute nightmare in terms of password management. And if I use a common password, all local admins on all workstations are vulnerable. I also have a situation where I have a single external RDP machine (a VM) for the business owners to access (for some remote business functions when they can’t make it in), I do NOT want this machine to have a local admin installed!!
Nov
21
comment Running an administrative program under user account - domain edition
My servers are running Windows 2012 R2. I am using Active Directory straight from the AD controller. The machine in question is a Windows 8.1 Enterprise workstation. It is on this workstation that I cannot get either Install-ADServiceAccount or Import-Module ActiveDirectory to work. There does not seem to be any RSAT tools for Windows 8.1 available yet.