General discussion

Locked

NT4 MCSE Stumper

By karlweiskopf ·
Below is a live problem I am having. Can you help or direct me to the proper
resources to find the answer? I haven't been able to get our own network people to get this to work, and at least one is an MCSE.

I have 2 NT 4.0 servers, MOD16 and MODCLEV.
A nightly job running on MODCLEV needs to get files from MOD16.
The job is a .BAT file that gets run on MODCLEV using the "AT" command (job
scheduler).

The .BAT works fine when I'm logged on to MODCLEV, but when the AT command
runs it,the "NET USE" won't work. I know that .BAT is running in the right
directory, etc.

I've tried accessing the files by their absolute path (e.g.
\\mod16\msgdata\*.*) but it says the userid/password is wrong. I have no way
to set them for anotherserver.

How can MODCLEV get to files on MOD16 from a background "AT" command?

Thanks...Karl

This conversation is currently closed to new comments.

9 total posts (Page 1 of 1)  
| Thread display: Collapse - | Expand +

All Comments

Collapse -

NT4 MCSE Stumper

by bhostmeyer In reply to NT4 MCSE Stumper

Sharing Violation.

It sounds like the folder does not have the security rights correct The AT program uses security of the Local Admin not the network admin you need to set up the security to allow the local admin for it to work... I do the same thing your talking about on 5 or 6 different servers..

Hope This helps
Brooke Hostmeyer
Net Admin
Vijon labs Inc.

Collapse -

NT4 MCSE Stumper

by karlweiskopf In reply to NT4 MCSE Stumper

The question was auto-closed by TechRepublic

Collapse -

NT4 MCSE Stumper

by Smurfman In reply to NT4 MCSE Stumper

Hi, I would go to Microsoft Technet and look at the following artical:

Network Access Validation Algorithm and Example [Q103390]


There is a case example towards the bottom that sounds like what you are doing, try that, let me know.

Smurfman

Collapse -

NT4 MCSE Stumper

by karlweiskopf In reply to NT4 MCSE Stumper

The question was auto-closed by TechRepublic

Collapse -

NT4 MCSE Stumper

by clark85 In reply to NT4 MCSE Stumper

You must remember that when the AT command runs, it runs with the security of the user account that the Task Scheduler service starts with. To test this, have the Task Scheduler service on MODCLEV startup using the Administrator account. Since thisworks when launching the batch file interactivly, we know that it has the correct access.

Hope this helps.

Collapse -

NT4 MCSE Stumper

by karlweiskopf In reply to NT4 MCSE Stumper

The question was auto-closed by TechRepublic

Collapse -

NT4 MCSE Stumper

by zk In reply to NT4 MCSE Stumper

Security context may be the answer to your problem.

When you logon to MODCLEV and run the .bat it is running as you (admin). And it doesn't involve scheduling to do stuff on other computer. That's why it works. But when you use AT, it isn't the old AT anymore.

As soon as you install IE 4 or 5, I think 5, your schedule service (control panel->services) which uses atsvc.exe from system32 folder has been completely replaced. With this old schedule service you can change the startup, logon as in control panel. You can schedule your service as any particular user.

Now, after IE installation, you have a new service called task scheduler which uses mstask.exe from system32 folder. If you check the service's startup in control panel -> services, the logon as is gray out w/o option to change. Now everytime you schedule something (AT, WINAT etc) you are running it as LocalSystem account which doesn't have ANY authority on the network (anywhere but local). So you can schedule anything (shutdown etc) to local and it will still work. But as soon as it involves shares on other computer, shutdown other computer, your LocalSystem account can't do squat. So, that's why MODCLEV cannot command anything to MOD16.

You can verify the security context by using "pulist" from resource kit.

Now, the solution. 1st, delete the task scheduler service and/or schedule service from MODCLEV (use sc or service installation wizard from resource kit). After this use the same tools (svc installation wizard is much easier) to add a service called "schedule" and the executable for the service would be atsvc.exe from system32 folder. Go to schedule service in control panel, services. Set startup to automatic, log on as to your domain admin account. You should be set now.

www.jsiinc.com and http://is-it-true.org/nt has more info.

Hope that helps and good luck. Email zaw@trdesk.com if it still doesn't work.

Collapse -

NT4 MCSE Stumper

by karlweiskopf In reply to NT4 MCSE Stumper

The question was auto-closed by TechRepublic

Collapse -

NT4 MCSE Stumper

by karlweiskopf In reply to NT4 MCSE Stumper

This question was auto closed due to inactivity

Back to Windows Forum
9 total posts (Page 1 of 1)  

Related Discussions

Related Forums