Mailing-List: contact cygwin-help AT cygwin DOT com; run by ezmlm
List-Subscribe: <mailto:cygwin-subscribe AT cygwin DOT com>
List-Archive: <http://sources.redhat.com/ml/cygwin/>
List-Post: <mailto:cygwin AT cygwin DOT com>
List-Help: <mailto:cygwin-help AT cygwin DOT com>, <http://sources.redhat.com/ml/#faqs>
Sender: cygwin-owner AT cygwin DOT com
Mail-Followup-To: cygwin AT cygwin DOT com
Delivered-To: mailing list cygwin AT cygwin DOT com
Message-ID: <400F95A6.2060601@zib.de>
Date: Thu, 22 Jan 2004 10:19:34 +0100
From: Stefan Zachow <zachow AT zib DOT de>
Reply-To: stefan AT zachow DOT org
Organization: Zuse-Institute Berlin (ZIB)
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.4) Gecko/20030624 Netscape/7.1 (ax)
MIME-Version: 1.0
To: cygwin AT cygwin DOT com
Subject: Re: running the latest cygwin on a windows 2003 server
References: <400D3B18 DOT 4000305 AT zib DOT de> <6 DOT 0 DOT 1 DOT 1 DOT 0 DOT 20040120095121 DOT 03921320 AT 127 DOT 0 DOT 0 DOT 1> <400D49BE DOT 1090108 AT zib DOT de> <Pine DOT GSO DOT 4 DOT 56 DOT 0401201051430 DOT 14918 AT slinky DOT cs DOT nyu DOT edu> <400D5539 DOT 7010809 AT zib DOT de> <Pine DOT GSO DOT 4 DOT 56 DOT 0401201143420 DOT 14918 AT slinky DOT cs DOT nyu DOT edu>
In-Reply-To: <Pine.GSO.4.56.0401201143420.14918@slinky.cs.nyu.edu>
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
X-IsSubscribed: yes

Thanks a lot to all who helped me.

In case one encounters this problem the web-site:

http://msdn.microsoft.com/library/default.asp?url=/library/en-us/dncode/html/secure06122003.asp

gives an answer.

Creating Various Global Objects May Fail:

Starting with Windows Server 2003, the creation of some global objects,
such as file mapping will fail unless the calling process has the
SeCreateGlobalPrivilege privilege enabled. Note that the privilege check
is limited to the creating of said objects, and does not apply to opening
existing ones. For example, the following code will fail on Windows
Server 2003 unless the process account has this privilege:

HANDLE hMap = CreateFileMapping(INVALID_HANDLE_VALUE,0,PAGE_READWRITE,
0, 0xFFFF,"Global\\MyMapping");

By default this privilege is assigned to all services and administrators.
This privilege also applies when creating symbolic links in the object
manager. The way around this is to either grant the account in question
this privilege, or do not make the object name global. Of course,
the latter may not be possible.

OK now, how to solve this:

 Start -> Administrative Tools -> Local  Security Policy

 Security Settings -> Local Policies -> User Rights Assignment

 Key: Create Global Objects

 Add the group that has limited rights (e.g. Remote Desktor Users)

   Stefan




--
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple
Problem reports:       http://cygwin.com/problems.html
Documentation:         http://cygwin.com/docs.html
FAQ:                   http://cygwin.com/faq/