RE: [U2] UD and SBS Server
Thanks Lou. This was informative and reinforces the concept to: a) get the dbms onto its own machine, and b) don't put the dbms on a domain controller, because a domain controller should be on its own machine if there are more than one machine (servers) in the domain. Goes to show you how "black-box" programming sucks, because noone ever knows why things go wrong nor how to fix them. :-) Thanks again, Bill _ From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Lou Perez Sent: Monday, February 25, 2008 10:15 AM To: u2-users@listserver.u2ug.org Subject: RE: [U2] UD and SBS Server Bill, Our clients have run into this multiple times with UniData and Windows 2003 servers that are Domain controllers. It is always an issue when the machine was a fresh install and not an upgrade from Windows 2000. The problem most likely isn't that you're trying to do this with SBS, it is the fact that SBS is also an Active Directory Domain controller. Contact with IBM support has not helped since they claim this is a Microsoft Windows security problem easily confirmed by the fact that Admin's can telnet in. Many of our clients IT staff have found themselves having to become Active Directory experts to figure out how to allow non-Admin user's telnet access to a domain controller. If you think about it, why would you let any non administrator telnet access to a server anyway? Of course if you are not running System Builder you wouldn't, but we are and need to. Many Google searches finally resulted in these Microsoft Articles (again focusing on the Domain Controller aspect, not the SBS). http://support.microsoft.com/kb/917791 (new article, might be why the next one didn't always work) http://support.microsoft.com/kb/292536 This one details how to prevent access, so use reverse engineering to figure out how to allow. I found this note in the article helpful: NOTE: When there is a TelnetClients group, only users who are members of this group have Telnet access to the domain controllers in the domain, unless those users are administrators of the domain. Members of the Administrators group always have access by using Telnet even if they are not members of the TelnetClients group. I am not convinced that following these instruction fixes the problem. Some cases it does other cases it has not, but might give you an idea why. Sorry to not have a more conclusive solution, but we try hard to convince people not to run the database on their Domain Controller. In the case of SBS, the idea is to get everything on one box. Good luck. Louis Perez System Administrator F.W. Davison and Company, Inc. REGARDING E-MAIL MESSAGES FROM F.W. DAVISON AND COMPANY, INC.: In an effort to conserve our natural resources, and to be sure time-sensitive information reaches our customers as quickly as possible, F.W. Davison & Company distributes notices and other important information mainly through e-mail. To be sure these notices are received by the appropriate people in your office, please forward this e-mail if necessary. You can update your e-mail address by logging into the Customer Resource Center at www.fwdco.com and proceeding to Account Information > Update Account Information. CONFIDENTIALITY NOTICE: This e-mail message, and any accompanying documents, is for the sole use of the intended recipient(s) and may contain confidential and privileged information. Any unauthorized review, use, disclosure, distribution or copying is prohibited. If you are not the intended recipient, please contact our office by e-mail or by telephone at (508) 747-7261 and immediately destroy all copies of the original message. --- u2-users mailing list u2-users@listserver.u2ug.org To unsubscribe please visit http://listserver.u2ug.org/ --- u2-users mailing list u2-users@listserver.u2ug.org To unsubscribe please visit http://listserver.u2ug.org/
RE: [U2] UD and SBS Server
Bill, Our clients have run into this multiple times with UniData and Windows 2003 servers that are Domain controllers. It is always an issue when the machine was a fresh install and not an upgrade from Windows 2000. The problem most likely isn't that you're trying to do this with SBS, it is the fact that SBS is also an Active Directory Domain controller. Contact with IBM support has not helped since they claim this is a Microsoft Windows security problem easily confirmed by the fact that Admin's can telnet in. Many of our clients IT staff have found themselves having to become Active Directory experts to figure out how to allow non-Admin user's telnet access to a domain controller. If you think about it, why would you let any non administrator telnet access to a server anyway? Of course if you are not running System Builder you wouldn't, but we are and need to. Many Google searches finally resulted in these Microsoft Articles (again focusing on the Domain Controller aspect, not the SBS). http://support.microsoft.com/kb/917791 (new article, might be why the next one didn't always work) http://support.microsoft.com/kb/292536 This one details how to prevent access, so use reverse engineering to figure out how to allow. I found this note in the article helpful: NOTE: When there is a TelnetClients group, only users who are members of this group have Telnet access to the domain controllers in the domain, unless those users are administrators of the domain. Members of the Administrators group always have access by using Telnet even if they are not members of the TelnetClients group. I am not convinced that following these instruction fixes the problem. Some cases it does other cases it has not, but might give you an idea why. Sorry to not have a more conclusive solution, but we try hard to convince people not to run the database on their Domain Controller. In the case of SBS, the idea is to get everything on one box. Good luck. Louis Perez System Administrator F.W. Davison and Company, Inc. REGARDING E-MAIL MESSAGES FROM F.W. DAVISON AND COMPANY, INC.: In an effort to conserve our natural resources, and to be sure time-sensitive information reaches our customers as quickly as possible, F.W. Davison & Company distributes notices and other important information mainly through e-mail. To be sure these notices are received by the appropriate people in your office, please forward this e-mail if necessary. You can update your e-mail address by logging into the Customer Resource Center at www.fwdco.com and proceeding to Account Information > Update Account Information. CONFIDENTIALITY NOTICE: This e-mail message, and any accompanying documents, is for the sole use of the intended recipient(s) and may contain confidential and privileged information. Any unauthorized review, use, disclosure, distribution or copying is prohibited. If you are not the intended recipient, please contact our office by e-mail or by telephone at (508) 747-7261 and immediately destroy all copies of the original message. --- u2-users mailing list u2-users@listserver.u2ug.org To unsubscribe please visit http://listserver.u2ug.org/
RE: [U2] UD and SBS Server
Colin: After reviewing this with IBM we've concluded that because I'm trying to install UD onto an already configured and running SBS server, and because the Windows security framework is so complex, there must be some security "object" within the Windows security framework that wasn't configured which will allow UD to be installed. Consequently, we're informing our customer to get another server to install UD onto. This is what they should do anyway. Bill _ From: Bill Haskett [mailto:[EMAIL PROTECTED] Sent: Wednesday, February 20, 2008 6:08 PM To: 'u2-users@listserver.u2ug.org' Subject: RE: [U2] UD and SBS Server Thanks David. The service is set up to allow interaction with desktop. I'll log a support call tomorrow with IBM. A Windows friend of mine said SBS isn't supposed to be used as an application server, so it didn't surprise him that this was causing a problem. Bill From: Bill Haskett [mailto:[EMAIL PROTECTED] Sent: Wednesday, February 20, 2008 5:46 PM To: 'u2-users@listserver.u2ug.org' Subject: RE: [U2] UD and SBS Server Colin: I'll call them up tomorrow and see if this user can log into the console...the machine is two thousand miles away. :-) Bill -Original Message- From: [EMAIL PROTECTED] [ <mailto:[EMAIL PROTECTED]> mailto:[EMAIL PROTECTED] On Behalf Of David Jordan Sent: Wednesday, February 20, 2008 4:11 PM To: u2-users@listserver.u2ug.org Subject: RE: [U2] UD and SBS Server Hi Bill This is an old problem with UniVerse on SBS that only those with admin rights could login and I am sure it had been resolved. Chase up IBM support. Other option is to change the services login for the UD telnet server. Try allowing service to interact with desktop. Regards David Jordan -Original Message- From: Bill Haskett [ <mailto:[EMAIL PROTECTED]> mailto:[EMAIL PROTECTED] Sent: Wednesday, February 20, 2008 5:59 PM To: 'u2-users@listserver.u2ug.org' Subject: RE: [U2] UD and SBS Server Tim: It says "This user can log on to: All Computers". Bill -Original Message- From: [EMAIL PROTECTED] [ <mailto:[EMAIL PROTECTED]> mailto:[EMAIL PROTECTED] On Behalf Of Tim Stokes Sent: Wednesday, February 20, 2008 2:47 PM To: u2-users@listserver.u2ug.org Subject: RE: [U2] UD and SBS Server Bill, What is the setup for the id in: Active directory for users and computers --> account tab > log on to button. Tim _ From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Colin Alfke Sent: Wednesday, February 20, 2008 1:51 PM To: u2-users@listserver.u2ug.org Subject: RE: [U2] UD and SBS Server Bill; Like Tim said - see if that user can actually log into the console/server. That's really what telnet does hth Colin Alfke Calgary Canada -Original Message- From: Bill Haskett Tim: Thanks. This is an SBS server and U2 is installed onto it. We created a user for me and I'm a member of the "domain admins" group. I can log in. I created another user for our use and made them a member of the "UniData" group. This group was created under the server management option "Security Group Management". It was created with a "Global" scope and a group type of "Security". I followed Colin's advice but still no luck. I've passed this information on to their administrator and will see what he decides. If you think of anything I've missed please let me know. Thanks again. Bill -----Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Bill Haskett Sent: Wednesday, February 20, 2008 3:23 PM To: u2-users@listserver.u2ug.org >Subject: RE: [U2] UD and SBS Server Tim: Thanks. I've created the user via UniAdmin. It's a domain user, built like other users created. The user is allowed onto the application. But I get this message after entering the name and password. When I add the "domain admins" group to the user they can login. I'm thinking there's something else required, and the Windows administrator did something unusual, but can't find it in the documentation, nor where to look. I've spoken with two different MSCEs and we couldn't figure out the problem (they didn't set up the machine). The administrator who did set up the machine did as much as he could. I hate to think I will end up informing our client they need another server, though they probably do, and can't really install onto SBS. If you have any other ideas, please let me know. Thanks again, Bill -Original Message- From: Tim Stokes I have seen this problem. Check your login id to make sure you are allow to login to the U2 server. Tim -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Bill Haskett Sent: Tuesday, February 1
RE: [U2] UD and SBS Server
Tim: It says "This user can log on to: All Computers". Bill >-Original Message- >From: [EMAIL PROTECTED] >[mailto:[EMAIL PROTECTED] On Behalf Of Tim Stokes >Sent: Wednesday, February 20, 2008 2:47 PM >To: u2-users@listserver.u2ug.org >Subject: RE: [U2] UD and SBS Server > >Bill, > >What is the setup for the id in: >Active directory for users and computers --> > account tab > log on to button. > >Tim > > >-Original Message- >From: [EMAIL PROTECTED] >[mailto:[EMAIL PROTECTED] On Behalf Of Bill Haskett >Sent: Wednesday, February 20, 2008 3:23 PM >To: u2-users@listserver.u2ug.org >Subject: RE: [U2] UD and SBS Server > >Tim: > >Thanks. I've created the user via UniAdmin. It's a domain user, built like >other >users created. The user is allowed onto the application. But I get this >message >after entering the name and password. When I add the "domain admins" group to >the >user they can login. > >I'm thinking there's something else required, and the Windows administrator did >something unusual, but can't find it in the documentation, nor where to look. >I've >spoken with two different MSCEs and we couldn't figure out the problem (they >didn't >set up the machine). The administrator who did set up the machine did as much >as he >could. > >I hate to think I will end up informing our client they need another server, >though >they probably do, and can't really install onto SBS. > >If you have any other ideas, please let me know. > >Thanks again, > >Bill > >>-Original Message- >>From: [EMAIL PROTECTED] >>[mailto:[EMAIL PROTECTED] On Behalf Of Tim Stokes >>Sent: Wednesday, February 20, 2008 8:01 AM >>To: u2-users@listserver.u2ug.org >>Subject: RE: [U2] UD and SBS Server >> >>I have seen this problem. Check your login id to make sure you are allow >>to login to the U2 server. >> >> >>-Original Message- >>From: [EMAIL PROTECTED] >>[mailto:[EMAIL PROTECTED] On Behalf Of Bill Haskett >>Sent: Tuesday, February 19, 2008 11:48 PM >>To: u2-users@listserver.u2ug.org >>Subject: RE: [U2] UD and SBS Server >> >>Colin: >> >>I followed the exact steps and still have the login problem. When I look at >>the in >>Administrative Tools I see there is no "Local Security Policy" but there was >>a >>"Domain controller security policy". In there I added the appropriate groups (noted >>as 'domain\group') to both local policies you mentioned, beneath user rights >>assignment. >> >>However, this didn't seem to work. Lord knows what the problem is, as we're >>trying >>to load onto an already setup and configured system. >> >>Bill >> >> >> _ >> >>From: [EMAIL PROTECTED] >>[mailto:[EMAIL PROTECTED] >>On Behalf Of Colin Alfke >>Sent: Tuesday, February 19, 2008 6:38 AM >>To: u2-users@listserver.u2ug.org >>Subject: RE: [U2] UD and SBS Server >> >> >> >>Bill; >> >>There are a couple of permissions that non-admin users need. >> >>Add the policies "Allow log on locally" and "Access this computer from the >>network" to your UniDataUsers group. >> >>In W2K3, select Administrative Tools/Local Security Policy and Domain >>Controller Security Policy, expand Security Settings, expand Local Policies, >>expand User Rights Assignment. Under the Policy column select "Allow log on >>locally" and add your group (or Users or Domain Users). Again select "Access >>this computer from the network" and add your group. >> >>To refresh policies without a server restart press Start/Run and at the >>Open: box enter gpupdate and press OK button. >> >>hth >>Colin Alfke >>Calgary Canada >> >>-Original Message- >>From: Bill Haskett >> >>I've installed UD v7.1.9 on a Windows 2003 SBS server. The matrix says >>6.1.7 - 7.1.6 is certified on Win 2K3 SBS; it doesn't mention either 7.1.9 >>or 7.1.12. Unless I add a user to the Domain Admins group I cannot access >>via telnet. >> >>I created a group for "UniDataUsers" that has full control of all accounts, >>our application directory, and the "E:\IBM\ud71" directory. I added a new >>user and added the UniDataUsers group to them. I cannot login via telnet. >>I followed the following: >> >>http://support.microsoft.com/default.aspx/kb/292536 >> >>but this doesn't seem to help. The error I receive is: >> >>Welcome to DataTrust Telnet Server >>login: AsiOffice >>Password: >>Your account has restrictions that prevent you from logging on at this time. >>Please try again later. >> >>UniData telnet session terminating... >> >>This is the first time I've installed UD onto an SBS server. Does anyone >>know what this problem is? Thanks. >> >>Bill Haskett >>Advantos Systems, Inc. --- u2-users mailing list u2-users@listserver.u2ug.org To unsubscribe please visit http://listserver.u2ug.org/
RE: [U2] UD and SBS Server
Thanks David. The service is set up to allow interaction with desktop. I'll log a support call tomorrow with IBM. A Windows friend of mine said SBS isn't supposed to be used as an application server, so it didn't surprise him that this was causing a problem. Bill >-Original Message- >From: [EMAIL PROTECTED] >[mailto:[EMAIL PROTECTED] On Behalf Of David Jordan >Sent: Wednesday, February 20, 2008 4:11 PM >To: u2-users@listserver.u2ug.org >Subject: RE: [U2] UD and SBS Server > >Hi Bill > >This is an old problem with UniVerse on SBS that only those with admin >rights could login and I am sure it had been resolved. Chase up IBM >support. > >Other option is to change the services login for the UD telnet >server. Try >allowing service to interact with desktop. > >Regards > >David Jordan >--- >u2-users mailing list >u2-users@listserver.u2ug.org >To unsubscribe please visit http://listserver.u2ug.org/ --- u2-users mailing list u2-users@listserver.u2ug.org To unsubscribe please visit http://listserver.u2ug.org/
RE: [U2] UD and SBS Server
Colin: I'll call them up tomorrow and see if this user can log into the console...the machine is two thousand miles away. :-) Bill _ From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Colin Alfke Sent: Wednesday, February 20, 2008 1:51 PM To: u2-users@listserver.u2ug.org Subject: RE: [U2] UD and SBS Server Bill; Like Tim said - see if that user can actually log into the console/server. That's really what telnet does hth Colin Alfke Calgary Canada -Original Message- From: Bill Haskett Tim: Thanks. This is an SBS server and U2 is installed onto it. We created a user for me and I'm a member of the "domain admins" group. I can log in. I created another user for our use and made them a member of the "UniData" group. This group was created under the server management option "Security Group Management". It was created with a "Global" scope and a group type of "Security". I followed Colin's advice but still no luck. I've passed this information on to their administrator and will see what he decides. If you think of anything I've missed please let me know. Thanks again. Bill >-Original Message- >From: Tim Stokes > >I have seen this problem. Check your login id to make sure you are >allow to login to the U2 server. --- u2-users mailing list u2-users@listserver.u2ug.org To unsubscribe please visit http://listserver.u2ug.org/ --- u2-users mailing list u2-users@listserver.u2ug.org To unsubscribe please visit http://listserver.u2ug.org/
RE: [U2] UD and SBS Server
Hi Bill This is an old problem with UniVerse on SBS that only those with admin rights could login and I am sure it had been resolved. Chase up IBM support. Other option is to change the services login for the UD telnet server. Try allowing service to interact with desktop. Regards David Jordan --- u2-users mailing list u2-users@listserver.u2ug.org To unsubscribe please visit http://listserver.u2ug.org/
RE: [U2] UD and SBS Server
Bill, What is the setup for the id in Active directory for users and computers --> account tab > log on to button. Tim -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Bill Haskett Sent: Wednesday, February 20, 2008 3:23 PM To: u2-users@listserver.u2ug.org Subject: RE: [U2] UD and SBS Server Tim: Thanks. I've created the user via UniAdmin. It's a domain user, built like other users created. The user is allowed onto the application. But I get this message after entering the name and password. When I add the "domain admins" group to the user they can login. I'm thinking there's something else required, and the Windows administrator did something unusual, but can't find it in the documentation, nor where to look. I've spoken with two different MSCEs and we couldn't figure out the problem (they didn't set up the machine). The administrator who did set up the machine did as much as he could. I hate to think I will end up informing our client they need another server, though they probably do, and can't really install onto SBS. If you have any other ideas, please let me know. Thanks again, Bill >-Original Message- >From: [EMAIL PROTECTED] >[mailto:[EMAIL PROTECTED] On Behalf Of Tim Stokes >Sent: Wednesday, February 20, 2008 8:01 AM >To: u2-users@listserver.u2ug.org >Subject: RE: [U2] UD and SBS Server > >I have seen this problem. Check your login id to make sure you are allow >to login to the U2 server. > > >-Original Message- >From: [EMAIL PROTECTED] >[mailto:[EMAIL PROTECTED] On Behalf Of Bill Haskett >Sent: Tuesday, February 19, 2008 11:48 PM >To: u2-users@listserver.u2ug.org >Subject: RE: [U2] UD and SBS Server > >Colin: > >I followed the exact steps and still have the login problem. When I >look at the in >Administrative Tools I see there is no "Local Security Policy" >but there >was a >"Domain controller security policy". In there I added the appropriate >groups (noted >as 'domain\group') to both local policies you mentioned, beneath user >rights >assignment. > >However, this didn't seem to work. Lord knows what the problem is, as >we're trying >to load onto an already setup and configured system. > >Bill > > > _ > >From: [EMAIL PROTECTED] >[mailto:[EMAIL PROTECTED] >On Behalf Of Colin Alfke >Sent: Tuesday, February 19, 2008 6:38 AM >To: u2-users@listserver.u2ug.org >Subject: RE: [U2] UD and SBS Server > > > >Bill; > >There are a couple of permissions that non-admin users need. > >Add the policies "Allow log on locally" and "Access this computer from >the >network" to your UniDataUsers group. > >In W2K3, select Administrative Tools/Local Security Policy and Domain >Controller Security Policy, expand Security Settings, expand Local >Policies, >expand User Rights Assignment. Under the Policy column select >"Allow log >on >locally" and add your group (or Users or Domain Users). Again select >"Access >this computer from the network" and add your group. > >To refresh policies without a server restart press Start/Run and at the >Open: box enter gpupdate and press OK button. > >hth >Colin Alfke >Calgary Canada > >-Original Message- >From: Bill Haskett > >I've installed UD v7.1.9 on a Windows 2003 SBS server. The matrix says >6.1.7 - 7.1.6 is certified on Win 2K3 SBS; it doesn't mention either >7.1.9 >or 7.1.12. Unless I add a user to the Domain Admins group I cannot >access >via telnet. > >I created a group for "UniDataUsers" that has full control of all >accounts, >our application directory, and the "E:\IBM\ud71" directory. I added a >new >user and added the UniDataUsers group to them. I cannot login via >telnet. >I followed the >following: > >http://support.microsoft.com/default.aspx/kb/292536 > >but this doesn't seem to help. The error I receive is: > >Welcome to DataTrust Telnet Server >login: AsiOffice >Password: >Your account has restrictions that prevent you from logging on at this >time. >Please try again later. > >UniData telnet session terminating... > >This is the first time I've installed UD onto an SBS server. Does >anyone >know what this problem is? Thanks. > >Bill Haskett >Advantos Systems, Inc. >--- >u2-users mailing list >u2-users@listserver.u2ug.org >To unsubscribe please visit http://listserver.u2ug.org/ >--- >u2-users mailing list >u2-users@listserver.u2ug.org >To unsubscribe please visit http://listserver.u2ug.org/ >--- >u2-users mailing list >u2-users@listserver.u2ug.org >To unsubscribe please visit http://listserver.u2ug.org/ --- u2-users mailing list u2-users@listserver.u2ug.org To unsubscribe please visit http://listserver.u2ug.org/ --- u2-users mailing list u2-users@listserver.u2ug.org To unsubscribe please visit http://listserver.u2ug.org/
RE: [U2] UD and SBS Server
Bill; Like Tim said - see if that user can actually log into the console/server. That's really what telnet does hth Colin Alfke Calgary Canada -Original Message- From: Bill Haskett Tim: Thanks. This is an SBS server and U2 is installed onto it. We created a user for me and I'm a member of the "domain admins" group. I can log in. I created another user for our use and made them a member of the "UniData" group. This group was created under the server management option "Security Group Management". It was created with a "Global" scope and a group type of "Security". I followed Colin's advice but still no luck. I've passed this information on to their administrator and will see what he decides. If you think of anything I've missed please let me know. Thanks again. Bill >-Original Message- >From: Tim Stokes > >I have seen this problem. Check your login id to make sure you are >allow to login to the U2 server. --- u2-users mailing list u2-users@listserver.u2ug.org To unsubscribe please visit http://listserver.u2ug.org/
RE: [U2] UD and SBS Server
Tim: Thanks. This is an SBS server and U2 is installed onto it. We created a user for me and I'm a member of the "domain admins" group. I can log in. I created another user for our use and made them a member of the "UniData" group. This group was created under the server management option "Security Group Management". It was created with a "Global" scope and a group type of "Security". I followed Colin's advice but still no luck. I've passed this information on to their administrator and will see what he decides. If you think of anything I've missed please let me know. Thanks again. Bill >-Original Message- >From: [EMAIL PROTECTED] >[mailto:[EMAIL PROTECTED] On Behalf Of Tim Stokes >Sent: Wednesday, February 20, 2008 8:01 AM >To: u2-users@listserver.u2ug.org >Subject: RE: [U2] UD and SBS Server > >I have seen this problem. Check your login id to make sure you >are allow >to login to the U2 server. > > >-Original Message- >From: [EMAIL PROTECTED] >[mailto:[EMAIL PROTECTED] On Behalf Of Bill Haskett >Sent: Tuesday, February 19, 2008 11:48 PM >To: u2-users@listserver.u2ug.org >Subject: RE: [U2] UD and SBS Server > >Colin: > >I followed the exact steps and still have the login problem. When I >look at the in >Administrative Tools I see there is no "Local Security Policy" >but there >was a >"Domain controller security policy". In there I added the appropriate >groups (noted >as 'domain\group') to both local policies you mentioned, beneath user >rights >assignment. > >However, this didn't seem to work. Lord knows what the problem is, as >we're trying >to load onto an already setup and configured system. > >Bill > > > _ > >From: [EMAIL PROTECTED] >[mailto:[EMAIL PROTECTED] >On Behalf Of Colin Alfke >Sent: Tuesday, February 19, 2008 6:38 AM >To: u2-users@listserver.u2ug.org >Subject: RE: [U2] UD and SBS Server > > > >Bill; > >There are a couple of permissions that non-admin users need. > >Add the policies "Allow log on locally" and "Access this computer from >the >network" to your UniDataUsers group. > >In W2K3, select Administrative Tools/Local Security Policy and Domain >Controller Security Policy, expand Security Settings, expand Local >Policies, >expand User Rights Assignment. Under the Policy column select >"Allow log >on >locally" and add your group (or Users or Domain Users). Again select >"Access >this computer from the network" and add your group. > >To refresh policies without a server restart press Start/Run and at the >Open: box enter gpupdate and press OK button. > >hth >Colin Alfke >Calgary Canada > >-Original Message- >From: Bill Haskett > >I've installed UD v7.1.9 on a Windows 2003 SBS server. The matrix says >6.1.7 - 7.1.6 is certified on Win 2K3 SBS; it doesn't mention either >7.1.9 >or 7.1.12. Unless I add a user to the Domain Admins group I cannot >access >via telnet. > >I created a group for "UniDataUsers" that has full control of all >accounts, >our application directory, and the "E:\IBM\ud71" directory. I added a >new >user and added the UniDataUsers group to them. I cannot login via >telnet. >I followed the >following: > >http://support.microsoft.com/default.aspx/kb/292536 > >but this doesn't seem to help. The error I receive is: > >Welcome to DataTrust Telnet Server >login: AsiOffice >Password: >Your account has restrictions that prevent you from logging on at this >time. >Please try again later. > >UniData telnet session terminating... > >This is the first time I've installed UD onto an SBS server. Does >anyone >know what this problem is? Thanks. > >Bill Haskett >Advantos Systems, Inc. >--- >u2-users mailing list >u2-users@listserver.u2ug.org >To unsubscribe please visit http://listserver.u2ug.org/ >--- >u2-users mailing list >u2-users@listserver.u2ug.org >To unsubscribe please visit http://listserver.u2ug.org/ >--- >u2-users mailing list >u2-users@listserver.u2ug.org >To unsubscribe please visit http://listserver.u2ug.org/ --- u2-users mailing list u2-users@listserver.u2ug.org To unsubscribe please visit http://listserver.u2ug.org/
RE: [U2] UD and SBS Server
Tim: Thanks. I've created the user via UniAdmin. It's a domain user, built like other users created. The user is allowed onto the application. But I get this message after entering the name and password. When I add the "domain admins" group to the user they can login. I'm thinking there's something else required, and the Windows administrator did something unusual, but can't find it in the documentation, nor where to look. I've spoken with two different MSCEs and we couldn't figure out the problem (they didn't set up the machine). The administrator who did set up the machine did as much as he could. I hate to think I will end up informing our client they need another server, though they probably do, and can't really install onto SBS. If you have any other ideas, please let me know. Thanks again, Bill >-Original Message- >From: [EMAIL PROTECTED] >[mailto:[EMAIL PROTECTED] On Behalf Of Tim Stokes >Sent: Wednesday, February 20, 2008 8:01 AM >To: u2-users@listserver.u2ug.org >Subject: RE: [U2] UD and SBS Server > >I have seen this problem. Check your login id to make sure you are allow >to login to the U2 server. > > >-Original Message- >From: [EMAIL PROTECTED] >[mailto:[EMAIL PROTECTED] On Behalf Of Bill Haskett >Sent: Tuesday, February 19, 2008 11:48 PM >To: u2-users@listserver.u2ug.org >Subject: RE: [U2] UD and SBS Server > >Colin: > >I followed the exact steps and still have the login problem. When I >look at the in >Administrative Tools I see there is no "Local Security Policy" >but there >was a >"Domain controller security policy". In there I added the appropriate >groups (noted >as 'domain\group') to both local policies you mentioned, beneath user >rights >assignment. > >However, this didn't seem to work. Lord knows what the problem is, as >we're trying >to load onto an already setup and configured system. > >Bill > > > _ > >From: [EMAIL PROTECTED] >[mailto:[EMAIL PROTECTED] >On Behalf Of Colin Alfke >Sent: Tuesday, February 19, 2008 6:38 AM >To: u2-users@listserver.u2ug.org >Subject: RE: [U2] UD and SBS Server > > > >Bill; > >There are a couple of permissions that non-admin users need. > >Add the policies "Allow log on locally" and "Access this computer from >the >network" to your UniDataUsers group. > >In W2K3, select Administrative Tools/Local Security Policy and Domain >Controller Security Policy, expand Security Settings, expand Local >Policies, >expand User Rights Assignment. Under the Policy column select >"Allow log >on >locally" and add your group (or Users or Domain Users). Again select >"Access >this computer from the network" and add your group. > >To refresh policies without a server restart press Start/Run and at the >Open: box enter gpupdate and press OK button. > >hth >Colin Alfke >Calgary Canada > >-Original Message- >From: Bill Haskett > >I've installed UD v7.1.9 on a Windows 2003 SBS server. The matrix says >6.1.7 - 7.1.6 is certified on Win 2K3 SBS; it doesn't mention either >7.1.9 >or 7.1.12. Unless I add a user to the Domain Admins group I cannot >access >via telnet. > >I created a group for "UniDataUsers" that has full control of all >accounts, >our application directory, and the "E:\IBM\ud71" directory. I added a >new >user and added the UniDataUsers group to them. I cannot login via >telnet. >I followed the >following: > >http://support.microsoft.com/default.aspx/kb/292536 > >but this doesn't seem to help. The error I receive is: > >Welcome to DataTrust Telnet Server >login: AsiOffice >Password: >Your account has restrictions that prevent you from logging on at this >time. >Please try again later. > >UniData telnet session terminating... > >This is the first time I've installed UD onto an SBS server. Does >anyone >know what this problem is? Thanks. > >Bill Haskett >Advantos Systems, Inc. >--- >u2-users mailing list >u2-users@listserver.u2ug.org >To unsubscribe please visit http://listserver.u2ug.org/ >--- >u2-users mailing list >u2-users@listserver.u2ug.org >To unsubscribe please visit http://listserver.u2ug.org/ >--- >u2-users mailing list >u2-users@listserver.u2ug.org >To unsubscribe please visit http://listserver.u2ug.org/ --- u2-users mailing list u2-users@listserver.u2ug.org To unsubscribe please visit http://listserver.u2ug.org/
RE: [U2] UD and SBS Server
Here are some more complete instructions: Open AD Users and Computers. Create a Global group Add members to group accordingly, then assign directory rights accordingly. Click Start -> Programs -> Administrative Tools and click Domain Controller Security Policy. Double click the Security Settings folder, double click Local Policies, and then click User Rights Assignment. Under the Policy column, click Logon Locally, and then click Add. Click Browse, select the appropriate group, then click Add. Click Ok, click Ok, click Ok. Open a command prompt and type the following command: secedit /refreshpolicy machine_policy /enforce Press Enter twice. (secedit replaced with gpupdate) <http://www.microsoft.com/resources/documentation/WindowsServ/2003/standard/ proddocs/en-us/Default.asp?url=/resources/documentation/windowsserv/2003/sta ndard/proddocs/en-us/RefrGP.asp> I also have a PDF document from IBM which indicates to update the local security policy and then the domain security policy and add log on locally and access this computer from the network rights. May need to go through Start > Run > secpol.msc /s Search for "How to set Local Security Settings for Windows 2003" technote ref# 1209467. Hth Colin Alfke Calgary Canada -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Bill Haskett Sent: Tuesday, February 19, 2008 9:48 PM To: u2-users@listserver.u2ug.org Subject: RE: [U2] UD and SBS Server Colin: I followed the exact steps and still have the login problem. When I look at the in Administrative Tools I see there is no "Local Security Policy" but there was a "Domain controller security policy". In there I added the appropriate groups (noted as 'domain\group') to both local policies you mentioned, beneath user rights assignment. However, this didn't seem to work. Lord knows what the problem is, as we're trying to load onto an already setup and configured system. Bill _ From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Colin Alfke Sent: Tuesday, February 19, 2008 6:38 AM To: u2-users@listserver.u2ug.org Subject: RE: [U2] UD and SBS Server Bill; There are a couple of permissions that non-admin users need. Add the policies "Allow log on locally" and "Access this computer from the network" to your UniDataUsers group. In W2K3, select Administrative Tools/Local Security Policy and Domain Controller Security Policy, expand Security Settings, expand Local Policies, expand User Rights Assignment. Under the Policy column select "Allow log on locally" and add your group (or Users or Domain Users). Again select "Access this computer from the network" and add your group. To refresh policies without a server restart press Start/Run and at the Open: box enter gpupdate and press OK button. hth Colin Alfke Calgary Canada -Original Message- From: Bill Haskett I've installed UD v7.1.9 on a Windows 2003 SBS server. The matrix says 6.1.7 - 7.1.6 is certified on Win 2K3 SBS; it doesn't mention either 7.1.9 or 7.1.12. Unless I add a user to the Domain Admins group I cannot access via telnet. I created a group for "UniDataUsers" that has full control of all accounts, our application directory, and the "E:\IBM\ud71" directory. I added a new user and added the UniDataUsers group to them. I cannot login via telnet. I followed the following: http://support.microsoft.com/default.aspx/kb/292536 but this doesn't seem to help. The error I receive is: Welcome to DataTrust Telnet Server login: AsiOffice Password: Your account has restrictions that prevent you from logging on at this time. Please try again later. UniData telnet session terminating... This is the first time I've installed UD onto an SBS server. Does anyone know what this problem is? Thanks. Bill Haskett Advantos Systems, Inc. --- u2-users mailing list u2-users@listserver.u2ug.org To unsubscribe please visit http://listserver.u2ug.org/ --- u2-users mailing list u2-users@listserver.u2ug.org To unsubscribe please visit http://listserver.u2ug.org/ --- u2-users mailing list u2-users@listserver.u2ug.org To unsubscribe please visit http://listserver.u2ug.org/
RE: [U2] UD and SBS Server
I have seen this problem. Check your login id to make sure you are allow to login to the U2 server. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Bill Haskett Sent: Tuesday, February 19, 2008 11:48 PM To: u2-users@listserver.u2ug.org Subject: RE: [U2] UD and SBS Server Colin: I followed the exact steps and still have the login problem. When I look at the in Administrative Tools I see there is no "Local Security Policy" but there was a "Domain controller security policy". In there I added the appropriate groups (noted as 'domain\group') to both local policies you mentioned, beneath user rights assignment. However, this didn't seem to work. Lord knows what the problem is, as we're trying to load onto an already setup and configured system. Bill _ From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Colin Alfke Sent: Tuesday, February 19, 2008 6:38 AM To: u2-users@listserver.u2ug.org Subject: RE: [U2] UD and SBS Server Bill; There are a couple of permissions that non-admin users need. Add the policies "Allow log on locally" and "Access this computer from the network" to your UniDataUsers group. In W2K3, select Administrative Tools/Local Security Policy and Domain Controller Security Policy, expand Security Settings, expand Local Policies, expand User Rights Assignment. Under the Policy column select "Allow log on locally" and add your group (or Users or Domain Users). Again select "Access this computer from the network" and add your group. To refresh policies without a server restart press Start/Run and at the Open: box enter gpupdate and press OK button. hth Colin Alfke Calgary Canada -Original Message- From: Bill Haskett I've installed UD v7.1.9 on a Windows 2003 SBS server. The matrix says 6.1.7 - 7.1.6 is certified on Win 2K3 SBS; it doesn't mention either 7.1.9 or 7.1.12. Unless I add a user to the Domain Admins group I cannot access via telnet. I created a group for "UniDataUsers" that has full control of all accounts, our application directory, and the "E:\IBM\ud71" directory. I added a new user and added the UniDataUsers group to them. I cannot login via telnet. I followed the following: http://support.microsoft.com/default.aspx/kb/292536 but this doesn't seem to help. The error I receive is: Welcome to DataTrust Telnet Server login: AsiOffice Password: Your account has restrictions that prevent you from logging on at this time. Please try again later. UniData telnet session terminating... This is the first time I've installed UD onto an SBS server. Does anyone know what this problem is? Thanks. Bill Haskett Advantos Systems, Inc. --- u2-users mailing list u2-users@listserver.u2ug.org To unsubscribe please visit http://listserver.u2ug.org/ --- u2-users mailing list u2-users@listserver.u2ug.org To unsubscribe please visit http://listserver.u2ug.org/ --- u2-users mailing list u2-users@listserver.u2ug.org To unsubscribe please visit http://listserver.u2ug.org/
RE: [U2] UD and SBS Server
Colin: I followed the exact steps and still have the login problem. When I look at the in Administrative Tools I see there is no "Local Security Policy" but there was a "Domain controller security policy". In there I added the appropriate groups (noted as 'domain\group') to both local policies you mentioned, beneath user rights assignment. However, this didn't seem to work. Lord knows what the problem is, as we're trying to load onto an already setup and configured system. Bill _ From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Colin Alfke Sent: Tuesday, February 19, 2008 6:38 AM To: u2-users@listserver.u2ug.org Subject: RE: [U2] UD and SBS Server Bill; There are a couple of permissions that non-admin users need. Add the policies "Allow log on locally" and "Access this computer from the network" to your UniDataUsers group. In W2K3, select Administrative Tools/Local Security Policy and Domain Controller Security Policy, expand Security Settings, expand Local Policies, expand User Rights Assignment. Under the Policy column select "Allow log on locally" and add your group (or Users or Domain Users). Again select "Access this computer from the network" and add your group. To refresh policies without a server restart press Start/Run and at the Open: box enter gpupdate and press OK button. hth Colin Alfke Calgary Canada -Original Message- From: Bill Haskett I've installed UD v7.1.9 on a Windows 2003 SBS server. The matrix says 6.1.7 - 7.1.6 is certified on Win 2K3 SBS; it doesn't mention either 7.1.9 or 7.1.12. Unless I add a user to the Domain Admins group I cannot access via telnet. I created a group for "UniDataUsers" that has full control of all accounts, our application directory, and the "E:\IBM\ud71" directory. I added a new user and added the UniDataUsers group to them. I cannot login via telnet. I followed the following: http://support.microsoft.com/default.aspx/kb/292536 but this doesn't seem to help. The error I receive is: Welcome to DataTrust Telnet Server login: AsiOffice Password: Your account has restrictions that prevent you from logging on at this time. Please try again later. UniData telnet session terminating... This is the first time I've installed UD onto an SBS server. Does anyone know what this problem is? Thanks. Bill Haskett Advantos Systems, Inc. --- u2-users mailing list u2-users@listserver.u2ug.org To unsubscribe please visit http://listserver.u2ug.org/ --- u2-users mailing list u2-users@listserver.u2ug.org To unsubscribe please visit http://listserver.u2ug.org/
RE: [U2] UD and SBS Server
David: Thanks. I was thinking that too but UD's temp is in "E:\IBM\ud71\temp" and the entire "ud71" and below directories are authorized with the UniData group. I even check the permissions. :-) Thanks again, Bill >-Original Message- >From: [EMAIL PROTECTED] >[mailto:[EMAIL PROTECTED] On Behalf Of David Jordan >Sent: Monday, February 18, 2008 8:05 PM >To: u2-users@listserver.u2ug.org >Subject: RE: [U2] UD and SBS Server > >Hi Bill > >One of the issues from UniVerse was users not having read/write access to >the temp directory under \ibm\uv\temp > >Regards > >David Jordan --- u2-users mailing list u2-users@listserver.u2ug.org To unsubscribe please visit http://listserver.u2ug.org/
RE: [U2] UD and SBS Server
Bill; There are a couple of permissions that non-admin users need. Add the policies "Allow log on locally" and "Access this computer from the network" to your UniDataUsers group. In W2K3, select Administrative Tools/Local Security Policy and Domain Controller Security Policy, expand Security Settings, expand Local Policies, expand User Rights Assignment. Under the Policy column select "Allow log on locally" and add your group (or Users or Domain Users). Again select "Access this computer from the network" and add your group. To refresh policies without a server restart press Start/Run and at the Open: box enter gpupdate and press OK button. hth Colin Alfke Calgary Canada -Original Message- From: Bill Haskett I've installed UD v7.1.9 on a Windows 2003 SBS server. The matrix says 6.1.7 - 7.1.6 is certified on Win 2K3 SBS; it doesn't mention either 7.1.9 or 7.1.12. Unless I add a user to the Domain Admins group I cannot access via telnet. I created a group for "UniDataUsers" that has full control of all accounts, our application directory, and the "E:\IBM\ud71" directory. I added a new user and added the UniDataUsers group to them. I cannot login via telnet. I followed the following: http://support.microsoft.com/default.aspx/kb/292536 but this doesn't seem to help. The error I receive is: Welcome to DataTrust Telnet Server login: AsiOffice Password: Your account has restrictions that prevent you from logging on at this time. Please try again later. UniData telnet session terminating... This is the first time I've installed UD onto an SBS server. Does anyone know what this problem is? Thanks. Bill Haskett Advantos Systems, Inc. --- u2-users mailing list u2-users@listserver.u2ug.org To unsubscribe please visit http://listserver.u2ug.org/
RE: [U2] UD and SBS Server
Hi Bill One of the issues from UniVerse was users not having read/write access to the temp directory under \ibm\uv\temp Regards David Jordan --- u2-users mailing list u2-users@listserver.u2ug.org To unsubscribe please visit http://listserver.u2ug.org/
