Please note that VisualCron support is not actively monitoring this community forum. Please use our contact page for contacting the VisualCron support directly.


agregersen
2008-05-28T09:54:59Z
I'm trying to do some tasks in another windows domain (I'm in DomainA and I want to delete some files in DomainB). I've set up at useraccount in that domain and created credentials in VC for that user, but when I run the task (I using touch file for the moment), I get a "Impersonation failed" error.
Sponsor
Forum information
Support
2008-05-28T17:27:41Z
Hard to say. Have you tried the other way, to access domain A from domain B with VisualCron? Just for testing if it is a file/folder permission problem on domain B.
Henrik
Support
http://www.visualcron.com 
Please like  VisualCron on facebook!
agregersen
2008-05-28T18:32:41Z
Support wrote:

Hard to say. Have you tried the other way, to access domain A from domain B with VisualCron? Just for testing if it is a file/folder permission problem on domain B.



Should be a permission problem, I gave the useraccount domain admins permissions to ensure that permissions wasn't an issue. But impersonation can be because of how the network share is accessed (through the API)
Support
2008-05-28T18:43:43Z
We are using the Windows API function "LogonUser" from lib advapi32.dll. But the error "Impersonation failed" often comes after another error (which tells more about the actual problem). Which is the first error in your log file?
Henrik
Support
http://www.visualcron.com 
Please like  VisualCron on facebook!
agregersen
2008-05-31T20:34:49Z
Support wrote:

We are using the Windows API function "LogonUser" from lib advapi32.dll. But the error "Impersonation failed" often comes after another error (which tells more about the actual problem). Which is the first error in your log file?



Impersonation failed is the first (apart from the starting task log entry). But I found an article that might help me describing the problem (just ignore the mapping drive part). http://codebetter.com/bl...ve/2004/09/24/26730.aspx 

The fun part is that I can map a drive with that user from the commandline, but I try to touch the file (just using an unc path), I get the error.
Support
2008-05-31T21:13:35Z
Are you saying that you try to combine a network drive mapping with an impersonation of an Execute task?
Henrik
Support
http://www.visualcron.com 
Please like  VisualCron on facebook!
agregersen
2008-05-31T21:18:12Z
Support wrote:

Are you saying that you try to combine a network drive mapping with an impersonation of an Execute task?



No just that if I use net use * <uncpath> * /user:DomainB\User from the commandline where VisualCron is installed it works fine, but if I try to use TouchFile from inside VisualCron on a file in <uncpath>\workspace\filea using the same credentials as the net use, I get the impersonation failed. I think it has something to do that I'm trying to access a server in DomainB from DomainA and for some reason that is not possible. Are there any tests you would suggest to isolate the problem. I can think of doing a runas and then try to copy the file.
Support
2008-05-31T21:25:33Z
What happens if you change the username of the VisualCron service to your current user? It seems to be some permission problem with the SYSTEM account.
Henrik
Support
http://www.visualcron.com 
Please like  VisualCron on facebook!
agregersen
2008-05-31T21:37:41Z
Support wrote:

What happens if you change the username of the VisualCron service to your current user? It seems to be some permission problem with the SYSTEM account.



Using a user account in DomainA (used for almost all tasks in DomainA or "No credentials" gives the following error: ' Task failed with error: Could not find file \\<server in domainB>\c$\idaworkspace\postbackup.cmd'.

agregersen
2008-05-31T21:41:03Z
agregersen wrote:

Support wrote:

What happens if you change the username of the VisualCron service to your current user? It seems to be some permission problem with the SYSTEM account.



Using a user account in DomainA (used for almost all tasks in DomainA or "No credentials" gives the following error: ' Task failed with error: Could not find file \\<server in domainB>\c$\idaworkspace\postbackup.cmd'.



Come to think of it, DomainB trusts DomainA, but not the other way around. That will cause some sort of problem when trying to run as a useraccount that is untrusted. I think the easy solution is to have another VisualCron Server in that domain.
Support
2008-05-31T21:44:07Z
I was thinking about using User account in DomainA as the user that runs the service and use a Credential for a User in DomainB for the Task.

agregersen wrote:

agregersen wrote:

Support wrote:

What happens if you change the username of the VisualCron service to your current user? It seems to be some permission problem with the SYSTEM account.



Using a user account in DomainA (used for almost all tasks in DomainA or "No credentials" gives the following error: ' Task failed with error: Could not find file \\<server in domainB>\c$\idaworkspace\postbackup.cmd'.



Come to think of it, DomainB trusts DomainA, but not the other way around. That will cause some sort of problem when trying to run as a useraccount that is untrusted. I think the easy solution is to have another VisualCron Server in that domain.


Henrik
Support
http://www.visualcron.com 
Please like  VisualCron on facebook!
Scroll to Top