OTN Home > Oracle WebLogic Server 10.3.6.0 Documentation > Administration Console Online Help > Update user permissions in Windows NT and 2000

Administration Console Online Help

Previous Next Open TOC in new window
Content starts here

Update user permissions in Windows NT and 2000


To update the rights in Windows NT:

  1. On the Windows Start menu, select Programs->Administrative Tools.
  2. Select User Manager.
  3. Under the Policies menu, choose the User Rights option.
  4. Check the Show Advanced Users Rights option.
  5. Give the following rights to the Windows user running WebLogic Server:
    1. Act as part of the operating system.
    2. Create a token object.
    3. Replace a process level token.
  6. Verify that the Windows user running WebLogic Server is a member of the Administrators group.
  7. Reboot Windows NT to ensure all the modifications take effect.
  8. Verify that the Logon as System Account option is checked. Note that the Allow System to Interact with Desktop option does not need to be checked. Running the Windows NT Security realm under a specific Windows NT user account does not work.

    To update the rights in Windows 2000:

  9. On the Windows Start menu, select Programs->Administrative Tools.
  10. Select Local Security Policy.
  11. Go to Local Policies->User Rights Assignment.
  12. Give the following rights to the Windows user running WebLogic Server:
    1. Act as part of the operating system
    2. Create a token object
    3. Replace a process level token
  13. Verify that the Windows user running WebLogic Server is a member of the Administrators group.
  14. Reboot Windows 2000 to ensure all the modifications take effect.
  15. Verify that the Logon as System Account option is checked. Note that the Allow System to Interact with Desktop option does not need to be checked. Running the Windows NT Security realm under a specific Windows NT user account does not work.
    The following are common Windows NT error codes that occur when using the Windows NT Security realm:
    Error Meaning
    1326 The host machine running the security realm does not have a trust relationship with the primary domain controller. The host machine may not be a member of the domain or the domain may not trust the host machine.
    53 A network error has indicated that the path to the primary domain controller could not be located. This error can occur if the domain name is misspelled or if the domain name is specified rather than the host name of the primary domain controller.

    A full explanation of the Windows NT error codes is found in the winerror.h file.


Back to Top