error in taking elevated mode in TS

PFA screenshot

Hi Mohit,

Is UAC (user account control, control panel >  (all control panel items)  > user accounts > change user account control settings) set off or is still on?

If you're logged on to the server remotely (RDP) and you haven't used the /admin switch, then you will be running at a reduced privilege level compared to the console and this is capable of causing an installer privilege violation.

If you have applied vWorkspace lockdown policies to all users you could also be getting privilege violations.

Were you trying to reinstall or repair the vWorkspace installation. However the second error suggests you have other problems as well which could explain why you're trying to repair things. You may need some more immediate help by remote WebEx session.

How long have you been running vWorkspace?

Rick

please help... now this issue has started comming on VDI also. i am not able to install any package since it is not taking elevation mode.

Hello Rick,

Thanks for quick response.  UAC is set to ON. I am using Remote Desktops to connect to server which has /admin switch enabled by default, althought i als did RDP using /admin switch but it was same issue.

I have not set any lockdown policy. My objective was to uninstall vWorkspace and install it after sometime due to some unavoidable reason.it`s being more then 3 months i am running vWorkspace.

I do not have issue with webEx Session, please let me know when can we start it.

-Mohit Goyal

Hello Mohit,

Can you try creating an Active Directory OU at the root level. Ensure the OU does not have any policies applied and also blocks policy inheritance.Disable logins on one of the Terminal Servers and then when there are no more active user sessions move the server to the new OU. Force a Group Policy update on the server and then disable UAC on the server. After this try to uninstall or use the elevated rights.

Hi David,

Just ran a WebEx session with Mohit. If UAC is turned off, the error disappears. Event log shows Consent.exe appcrash. I tried removing all (x64 and x86) appinit_dll entries and it (consent.exe) still crashes which "almost" let's vWorkspace off the hook. Deleted all policies relating to test user (domain admin) and restarted explorer.exe. Consent.exe still crashed on privilege elevation. One of the appcrash errors involved  wdmaud.drv so I tried setting the RDP client to no audio. Still crashed.

It's getting a bit late for me but since a local admin login is fully functional, it's be interesting to be running process monitor against consent.exe while a domain admin in another session tried a privilege elevation.

In the interim the only workaround is to disable UAC.

Rick

Thank you Rick for all your support. i really approciate your efforts, i can live with UAC disabled but we really need to find solution for issue before it begin crashing applications.

Just let me know when can start working next on this. i will keep this server off from production till we find soluton for same.

-Mohit Goyal

One of the appcrash errors involved  wdmaud.drv so I tried setting the RDP client to no audio.

I had this issue when my TS Servers has the audio service disabled, but the GPO set to allow audio redirection...didn't matter what the client RDP settings were set to, it would crash....

Hello Rick

I have the exact same problem on 5 VDI Maschines and i can not disable UAC, so is there already a fix to this issue ? I would really appreciate it.

Regards

Bertrand

Hi Bertrand,

It has been traced back to the enhanced audio drivers and fixed in vWorkspace 7.2 MR1.

In the release notes for 7.2 MR1 (due to be released soon):

regards,

Rick