Local Security Handling (LSH) problem

[former_member626528]

Hi Expert,

I have problem with LSH configuration. I just configure LSH with user domain: administrator for DS and IS. and i get the successful for the configuration. After that, i test the LSH with another user without administrator rights to open nwsapsetup.exe but i got the error:

"NwSapSetup was not able to grant you administrator rights, either because

- The distribution service didn't respond, the installation service couldn't be started or the logon credentials for the installation service are in correct.

please contact your system administrator."

here is the log:

13:59:17.801 NwSapFeiDs 1 WinMain started in Thread 3740

13:59:17.804 NwSapFeiDs 1 Running as a SERVICE

13:59:17.805 NwSapFeiDs 1 Local server dir is C:\sap

13:59:17.807 NwSapFeiDs 1 Service Run has ThreadId 3540

13:59:17.852 NwSapFeiUt 1 Read new IS-Cred configuration

13:59:17.853 NwSapFeiDs 1 Going to create named pipe \\.\PIPE\_nw_sapfeids_is_pipe_

13:59:17.853 NwSapFeiUt 1 Listener pipe created

13:59:17.853 NwSapFeiUt 1 Listener pipe is waiting for notifications

14:04:59.525 NwSapFeiUt 1 Server got a connection on the pipe

14:04:59.525 NwSapFeiUt 1 Pipe read message:

test-PC.sapgui.com|192.168.1.100 /fs="\\192.168.1.10\sap\Setup" /cmdline='\\192.168.1.10\sap\Setup\NwSapSetup /Silent /product=SAPGUI /lshAdminMode' /_upid=3360 /winsta="WinSta0" /desktop="Default" /event="Global\IS_NW_SAPSETUP_Sync_Event{E13A9E99-1A80-407B-BDD8-0C14AD428CB3}"

14:04:59.525 NwSapFeiDs 1 Transmitted string:_ test-PC.sapgui.com|192.168.1.100 /fs="\\192.168.1.10\sap\Setup" /cmdline='\\192.168.1.10\sap\Setup\NwSapSetup /Silent /product=SAPGUI /lshAdminMode' /_upid=3360 /winsta="WinSta0" /desktop="Default" /event="Global\IS_NW_SAPSETUP_Sync_Event{E13A9E99-1A80-407B-BDD8-0C14AD428CB3}"

14:04:59.526 NwSapFeiDs 1 CRemoteInst is going to start new thread

14:04:59.526 NwSapFeiDs 1 New thread is running

14:04:59.526 NwSapFeiDs 1 Going to create named pipe \\.\PIPE\_nw_sapfeids_is_pipe_

14:04:59.526 NwSapFeiUt 1 Listener pipe created

14:04:59.526 NwSapFeiUt 1 Listener pipe is waiting for notifications

14:04:59.527 NwSapFeiDs 1 Service installation (1. try)

14:04:59.593 NwSapFeiUt 1 Trying to make user 'SAPGUI\administrator' local admin of 'test-PC.sapgui.com' (group 'Administrators')

14:04:59.609 NwSapFeiUt 1 User is already an admin on this wksta

14:04:59.609 NwSapFeiUt 1 Checking remote registry access

14:05:20.762 NwSapFeiUt 1 Service status is Stopped

14:05:20.762 NwSapFeiUt 1 remote registry service is stopped... Starting service...

14:05:20.792 NwSapFeiUt 1 Successfully started service RemoteRegistry

14:05:20.794 NwSapFeiUt 1 Service status is Running

14:05:20.794 NwSapFeiUt 1 Successfully waited for service to start up

14:05:20.802 NwSapFeiUt 1 Security: allowed SAPGUI\administrator to logon as service

14:05:20.809 NwSapFeiUt 1 Security: allowed SAPGUI\administrator to logon interactively

14:05:20.816 NwSapFeiUt 1 Security: allowed SAPGUI\administrator to act as part of system

14:05:20.820 NwSapFeiUt 1 Security: allowed SAPGUI\administrator to replace process-level token

14:05:20.821 NwSapFeiUt 1 Service status is Stopped

14:05:20.821 NwSapFeiUt 1 Service status is Stopped

14:05:20.821 NwSapFeiUt 1 The service is already installed and will be reconfigured

14:05:20.840 NwSapFeiUt 1 Successfully changed configuration of service NwSAPInstallerSvc.

14:05:21.089 NwSapFeiUt 1 Successfully started service NwSAPInstallerSvc

14:05:21.090 NwSapFeiUt 1 Successfully sent message:

SAPGUI\administrator

14:05:21.165 NwSapFeiUt 1 Service status is Running

-- last line is repeated 761 times --

14:05:33.245 NwSapFeiUt 1 Service status is StopPending

14:05:33.263 NwSapFeiUt 1 Service status is Stopped

14:05:33.263 NwSapFeiDs 1 IS is now stopped.

I'm really appreciated to your helping me to solve this issues

Have a nice day!

thanks and best regards

Tuan