Mailing-List: contact cygwin-help@cygwin.com; run by ezmlm List-Subscribe: List-Archive: List-Post: List-Help: , Sender: cygwin-owner@cygwin.com Mail-Followup-To: cygwin@cygwin.com Delivered-To: mailing list cygwin@cygwin.com Message-ID: <400F95A6.2060601@zib.de> Date: Thu, 22 Jan 2004 10:19:34 +0100 From: Stefan Zachow Reply-To: stefan@zachow.org Organization: Zuse-Institute Berlin (ZIB) User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.4) Gecko/20030624 Netscape/7.1 (ax) MIME-Version: 1.0 To: cygwin@cygwin.com Subject: Re: running the latest cygwin on a windows 2003 server References: <400D3B18.4000305@zib.de> <6.0.1.1.0.20040120095121.03921320@127.0.0.1> <400D49BE.1090108@zib.de> <400D5539.7010809@zib.de> In-Reply-To: Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit X-IsSubscribed: yes Thanks a lot to all who helped me. In case one encounters this problem the web-site: http://msdn.microsoft.com/library/default.asp?url=/library/en-us/dncode/html/secure06122003.asp gives an answer. Creating Various Global Objects May Fail: Starting with Windows Server 2003, the creation of some global objects, such as file mapping will fail unless the calling process has the SeCreateGlobalPrivilege privilege enabled. Note that the privilege check is limited to the creating of said objects, and does not apply to opening existing ones. For example, the following code will fail on Windows Server 2003 unless the process account has this privilege: HANDLE hMap = CreateFileMapping(INVALID_HANDLE_VALUE,0,PAGE_READWRITE, 0, 0xFFFF,"Global\\MyMapping"); By default this privilege is assigned to all services and administrators. This privilege also applies when creating symbolic links in the object manager. The way around this is to either grant the account in question this privilege, or do not make the object name global. Of course, the latter may not be possible. OK now, how to solve this: Start -> Administrative Tools -> Local Security Policy Security Settings -> Local Policies -> User Rights Assignment Key: Create Global Objects Add the group that has limited rights (e.g. Remote Desktor Users) Stefan -- Unsubscribe info: http://cygwin.com/ml/#unsubscribe-simple Problem reports: http://cygwin.com/problems.html Documentation: http://cygwin.com/docs.html FAQ: http://cygwin.com/faq/