Reputation
Top tag
Next privilege 50 Rep.
Comment everywhere
Badges
2 9
Impact
~10k people reached

  • 0 posts edited
  • 0 helpful flags
  • 2 votes cast
Jul
5
awarded  Notable Question
Jun
3
awarded  Popular Question
Jan
23
awarded  Popular Question
Nov
26
awarded  Notable Question
Jun
12
awarded  Popular Question
Dec
8
comment Bizarre - Domain Admin has no rights to modify domain scripts directory
Just also confirmed - taking ownership (to Domain Admins) does NOT work! FS file add still works, UNC file add is still prevented (“You need permission to perform this action” - no additional information given).
Dec
8
comment Bizarre - Domain Admin has no rights to modify domain scripts directory
Grogan Jr - Both Enterprise Admins and Domain Admins have full control over the directories. Ownership, however, is set to Administrators (DOMAIN\Administrators); but this doesn’t explain why going through the file system works while going through the UNC path does not.
Dec
7
asked Bizarre - Domain Admin has no rights to modify domain scripts directory
Nov
27
accepted Running an administrative program under user account - domain edition
Nov
27
comment Running an administrative program under user account - domain edition
I have determined that service accounts wouldn’t help me with a normal program because RUNAS always expects a password anyhow, even when you trail a username with $. The only way around it is with a weird scheduled task hack. So I have abandoned service accounts anyhow, and have posted my answer to my original question. Thanks anyhow for your help, it was appreciated. I may come back to you later to get the services account debugged for actual scheduled tasks.
Nov
27
awarded  Teacher
Nov
27
answered Running an administrative program under user account - domain edition
Nov
23
awarded  Editor
Nov
22
comment Running an administrative program under user account - domain edition
When I examine all of the reference screenshots that show the service account, I have the exact same thing (just named differently) on my own server.
Nov
22
comment Running an administrative program under user account - domain edition
I followed each and every step on the page that I linked to. The page that you linked to seems to be not that much more extensive (at least, in terms of creating the service account), so I am not sure what you are talking about when you say it’s a “slimmed down” copy. The only point where I hit a roadblock is when I switched over to the client computer and attempted to import the service account - initially with the import command itself, but after your fine instructions above (to make the importing command function in the first place), with the importing of the service account as a whole.
Nov
21
comment Running an administrative program under user account - domain edition
First paragraph, yes. I am running a domain admin account on the computer in question when I do these operations, plus I am elevating a PS console when I do so. Second paragraph, not sure.
Nov
21
comment Running an administrative program under user account - domain edition
I have installed the RSAT tools, and while they allowed Import-Module ActiveDirectory to work, the importing of the actual service account still failed, as per the error message in this thread.
Nov
21
comment Running an administrative program under user account - domain edition
@TheCleaner - You’re talking about going to the Executable, pulling up the properties, and then checking off the checkbox that says “run this program as an administrator” under the compatibility tab, correct? If so, no dice - “740: The requested operation requires elevation”
Nov
21
comment Running an administrative program under user account - domain edition
@TheCleaner - just tried using a local admin account via RunAs. Same problem - “740: The requested operation requires elevation.” The same account used when the icon is just double-cicked works just fine.
Nov
21
comment Running an administrative program under user account - domain edition
Aw, dangnabbit: PS C:\Windows\system32> Install-ADServiceAccount Services Install-ADServiceAccount : Cannot install service account. Error Message: 'An unspecified error has occurred'. At line:1 char:1 + Install-ADServiceAccount Services + ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ + CategoryInfo : WriteError: (Services:String) [Install-ADServiceAccount], ADException + FullyQualifiedErrorId : InstallADServiceAccount:PerformOperation:InstallServiceAcccountFailure,Microsoft‌​.ActiveD irectory.Management.Commands.InstallADServiceAccount