We have developed an office add-in. Its working fine with every other system except one. In that particular system when we try to load the app, it fails with a generic error (This app could not be started. Close this dialog to ignore the problem or click "Restart" to try again.). Event viewer has the following details
The machine-default permission settings do not grant Local Activation permission for the COM Server application with CLSID
{9BA05972-F6A8-11CF-A442-00A0C90A8F39}
and APPID
{9BA05972-F6A8-11CF-A442-00A0C90A8F39}
to the user STC\inmchandr SID (S-1-5-21-2779513660-4158667818-3257731910-104078) from address LocalHost (Using LRPC) running in the application container Unavailable SID (Unavailable). This security permission can be modified using the Component Services administrative tool.
The specified CLSID points to ShellWindows component, which is running with "Interactive User" account. I am unable to change the other security permissions like launching permissions for that component in DCom config. I tried to change the permission for the corresponding registry entry (as suggested in this link) But, nothing worked out.
The winword.exe is running as the same user who logged in. This system and the other systems (where it is working) are in the same network and I tried running gpupdate as well.
(In that problematic system) The same app is loading when we tried to run Word as administrator. The URL used for that taskpane app is launching without any issues from browsers
OS: Windows 8.1
Processor: 64 bit
Office: 2013
Could anyone help us out to resolve the issue?
Related
I have a requirement to host a WCF service to receive responses from a service. As UWP app doesn’t have wcf hosting capabilities, I chose this system tray component where I will host my service so that I get responses and communicate to UWP app via app service and show toasts.
But the systray component terminates immediately after the launch. To be clear on my systray integration with uwp I already tested it and is working and then extended it with WCF hosting.
Later I tried adding debugs showing message box on exceptions and found out that WCF service open call throwing below exception.
"System.ServiceModel.AddressAccessDeniedException: HTTP could not register URL http::1234"
Later understood that the sys tray app requires admin rights to register the URL that is hosted as part of the service and as UWP app launches sys tray via full trust API and it doesn't do through admin elevation.
So to solve this I got 2 approaches and tried as mentioned below:
1)
So I tried adding URL reg manually using netsh and same program works. Just to tweak I tried running the "same netsh command in sys tray app itself with admin priv" and only launched the tray app and i could see no exception and could see my service hosted, checked in browser.
Now I'm stuck with providing admin privileges while launching the sys tray app via UWP app.
But if tray app is launched by UWP, even though I included the netsh command it still shows the same exception. (Might be parent process (as run as admin is N/A UWP apps) is not having admin rights so even my netsh cmd in sys tray app is not working??? )
OR is there any way to provide arguments or any other API to run the tray app with admin via full trust api's from UWP app???
2)
Tried adding app manifest file to the tray app and modified as below
<requestedExecutionLevel level="requireAdministrator" uiAccess="false" />
But this also shows a error box saying this requires elevation and exited.
Kindly Help.
Requesting elevated privileges is currently not supported for desktop-bridge processes. So what you are seeing here is currently expected. The good news is that we are adding a new capability in RS5 (Fall 2018 update) called 'allowElevation', which will enable scenarios that require elevation.
You should be able to start testing the new capability with the latest Windows Insider Preview build and the corresponding SDK.
UPDATE 10/1/2018: I have posted a sample for this new capability
https://stefanwick.com/2018/10/01/app-elevation-samples-part-1/
I have problem printing reports to PDF through bullzip from Navision Application Server (1) if user is not in Local Admin group (2). Only under both conditions.
In Nav code I'm doing the following: init bullzip automation object (set all parameters to suppress GUI), run report to print document to virtual bullzip printer, catch output file. Thats it. Straight as a rail.
I have two environments: Windows Server 2008 and Windows 7 (different versions of Nav, but this is changing nothing). On Windows 7 it just do nothing (but works if user is admin). On server I can see error in Event Log (translated to English)
Faulting application gui.exe, version 9.8.0.1599, time stamp 0x517126dc, faulting module USER32.dll, version 6.0.6002.18541, time stamp 0x4ec3e39f, exception code 0xc0000142, fault offset 0x0006f52f, the process ID 0x3bc, application start time 0x01ce562238369fa9.
Gui.exe is a part of bullzip.
If I run the same code from Nav Classic Client, or from the same NAS launched in command line, or under local administrator account, or if i put the NAS user in local admin group - it works just fine.
To solve this problem i need to find out one of two and how to fix it:
What is the difference between local admin and regular user that could cause application to crash in non-interactive mode (service) under regular user account.
What is the difference in running NAS as service and as command line that could cause application to crash when run as service.
What I've tried so far: extend non-interactive desktop heap, give user all local privileges that admin have in gpedit. Not works. Don't know direction for further digging.
Any alternative free pdf printers advices are welcome.
This question is still actual. Though I've managed to setup PDF printing with PDFCreator. The tough part was to let several different NAS to print simultaneously. And now the setup have a bottleneck - PDFCreator's printing queue. With bullzip automations it could be avoided.
We've had some cases where third party DLL's have crashed within NAV due to permission restrictions.
The only effective way we could narrow down the files that it was trying to access was through using Process Monitor to try narrow down what was causing permission issues.
We found a folder within System32 to do with the System's Network Profile that some DLLs use. On that note, NAS's and such should be run under a domain account.
I think re-installing the application will do that,
Just make sure you are uninstalling each bullzip and ghost script,
Now Ghost script is tricky thing, if you are installing 32 bit over 64 then you are having problem,
refer this download link download appropriate version, install it,
and then install bullzip, after downloading new version from here
this will do..
then also if any problem(if you are using application for automation, you require new com object..) refer Forum, that explains most of application interface problems..
where you need to use public class PdfSettings with namespace bioPdf.
I hope this will help ..
I have a deployment package that opens an application when the instalation has finished.
On opening, this application validates a connection to a database using Integrated windows security.
The Problem is that when it calls
Process.Start(XXXXXXXXXX)
The application is opened under the machine account, the one that actualy does the install under UAC in Windows 7.
I know i can use the ProcessStartInfo object to ask the user to specify their password etc however this will be really annoying for them when they are already logged onto the machine.
I have tried using ProcessStartInfo, WinAPI etc but to no avail.
Has anyone else encountered this type of issue and/or have a suggested solution.
In summary I am trying to call
Process.Start........
Under the credentials of the logged on user as the last action of an deployment package under Windows 7
VB.NET application developed in VS2010 using Windows Installer Deployment.
Hy,
I've create a setup for my vb application with visual studio.
At the end of the install I want to launch the application so i've add a custom action and used the chell to launch it. It's work but... the application is launch as SYSTEM user...
is there a way to launch it in normal user (on win7 as administrator)?
Thanks for your help
If you are installing the application as an Administrator and launching the application, then it will start under that identity.
Try installing the application as a non Admin user and see under what identity the application launches.
If it still requires Admin access, then look at the privileges requested in your config file.
I have a web site that I developed on Vista using Vb.net9. It makes a connection to Oracle. for the connection I use System.Data.OracleClient. It works fine on my machine, and our test server, but it does not work on the production server. We installed the Oracle Client 11 on the server. The error is System.Data.OracleClient requires Oracle client software version 8.1.7
We've tried, making a console app that opens the connection, connection runs fine, opens, displays a message and all is well there.
Then we make a simple web form, put it in the directory of the program, just a button, opens the connection, try..catch, grabs error, same error.
The console app was running under an Administrator, web site running under iwam. Is it possible that iwam has a different path?
I've run into this error dozens of times:
Cause
Security permissions were not properly set when the Oracle client was installed on Windows with NTFS. The result of this is that content of the ORACLE_HOME directory is not visible to Authenticated Users on the machine; this causes an error while the System.Data.OracleClient is communicating with the Oracle Connectivity software from ASP.NET using Authenticated User privileges.
Solution
To fix the problem you have to give the Authenticated Users group privilege to the Oracle Home directory.
Log on to Windows as a user with Administrator privileges.
Start Windows Explorer and navigate to the ORACLE_HOME folder.
Choose properties on the ORACLE_HOME folder.
Click the Security tab of the Properties window.
Click on Authenticated Users item in the Name list.
Un-check the Read and Execute box in the Permissions list under the Allow column.
Re-check the Read and Execute box under the Allow column.
Click the Advanced button and in the Permission Entries verify that Authenticated Users are listed with permission: Read & Execute, and Apply To: This folder, subfolders and files. If not, edit that line and make sure that Apply To drop-down box is set to This folder, subfolders and files. This should already be set properly but it is important that you verify it.
Click the OK button until you close out all of the security properties windows. The cursor may present the hour glass for a few seconds as it applies the permissions you just changed to all subfolders and files.
Reboot, to assure that the changes have taken effect.
Try your application again.
The author of this post (now deleted post) suggests checking your C:\Windows\System32 folder to make sure that the oci.dll exists there. Copying in the file from the Oracle home directory solved this problem for me.
Update 1: It is possible for different users to have different path. But its not the likely problem here. There is more chance that the user that the iwam user doesn't have permission to the oracle client directory.
Update 0: Its suppose to work. Check for environment variable ( That are needed to find the oracle client and tnsnames.ora ). Also, Maybe you have a 32/64 bit issues. Also, consider using the Oracle Data Provider for .NET ( search for odp.net)
Oracle Client version 11 cannot connect to 8i databases. You will need a client in version 10 at most.
When we first moved over to Vista with Oracle 10g, we experienced this issue when we installed the Oracle client on our Vista boxes, even when we were running with admin privileges during install.
Oracle brought out a new version of the 10g client (10.2.0.3) that was Vista compatible.
I do believe that this was after 11g was released, so it is possible that there is a 'Vista compatible' version for 11g also.
Why not use this: dotConnect for Oracle (formerly known as OraDirect .NET)?
It can be configured to not require an Oracle Client at all.
We have been using this in both Windows Services and ASP.NET Web Services and it works like a charm.
For me, the issue was some plugin in my Visual Studio started forcing my application into x64 64bit mode, so the Oracle driver wasn't being found as I had Oracle 32bit installed.
So if you are having this issue, try running Visual Studio in safemode (devenv /safemode).
I could find that it was looking in SYSWOW64 for the ic.dll file by using the ProcMon app by SysInternals/Microsoft.
Update: For me it was the Telerik JustTrace product that was causing the issue, it was probably hooking in and affecting the runtime version somehow to do tracing.
Update2: It's not just JustTrace causing an issue, JustMock is causing the same processor mode issue. JustMock is easier to fix though: Click JustMock-> Disable Profiler and then my web app's oracle driver runs in the correct CPU mode. This might be fixed by Telerik in the future.