Migration for users without administrative rights |
Post Reply |
Author | |
matraksis
Newbie Joined: 26 Jul 2018 Status: Offline Points: 5 |
Post Options
Thanks(0)
Posted: 24 Oct 2018 at 3:44am |
Hello
Im using corporate edition 3.14, machines are Win10 1809. And single EXE migration. When I try to use that exe for users which have administrative rights - it works (even with UAC enabled). But when user is not local admins group's member, when exe is started - we have to provide any administrative rights. Then migration fails and message in logs are "The specified <LocalAdmin> account domain\xxxxx does not have elevated permissions" How to migrate machines without administrative rights for end user ??? Thanks ! |
|
Piotr Kania
|
|
zep042
Newbie Joined: 01 Nov 2018 Location: MN Status: Offline Points: 1 |
Post Options
Thanks(0)
|
I am having the same problem. Have you found a solution yet?
|
|
Thanks,
Dan |
|
matraksis
Newbie Joined: 26 Jul 2018 Status: Offline Points: 5 |
Post Options
Thanks(0)
|
The only workaround solution I got from support is :
- Change migration scope for ALL accounts (not Logged on only). - Run this tool as LOCAL SYSTEM credentials - by remote connection action f.e. Psexec -s or to use any central tool for software management (generally it should start all packages as SYSTEM) We've decided to add all domain users into local administrators group ONLY for the migration time. |
|
Piotr Kania
|
|
Support
Moderator Group Joined: 09 Nov 2006 Location: United Kingdom Status: Offline Points: 1860 |
Post Options
Thanks(0)
|
Seriously?
The whole point of User Account Control is that just because your are running as an Administrator does not mean that you have elevated administrator permissions. It is one of Microsoft's attempts to save you from yourself. Here is a near twelve year-old post that explains how this works. Nothing has changed. Given the widespread misunderstanding of UAC, we will be making changes to User Profile Wizard to make running as an Administrator more user-friendly, but we have our heads in our hands. |
|
mwinberry
Newbie Joined: 29 Nov 2018 Status: Offline Points: 1 |
Post Options
Thanks(0)
|
I've just run into this today myself, using the <LocalAdmin> element in the config file generated by the wizard, calling the executable with a Powershell script that's launched elevated. On my Win10 (1803) workgroup test machine, I've created a local user account, added it to the local admin group, logged in and made sure that I've got admin rights, and get the same error in the log about not having elevated permissions. If I change the element via the Kit to contain the credentials for the built-in administrator account, it works. I'll try using psexec and running as system.
|
|
Post Reply | |
Tweet
|
Forum Jump | Forum Permissions You cannot post new topics in this forum You cannot reply to topics in this forum You cannot delete your posts in this forum You cannot edit your posts in this forum You cannot create polls in this forum You cannot vote in polls in this forum |