Proactive IT Security
 

Right-click scanning in terminal server sessions - Configuration considerations

Search Support Articles

SEARCH Advanced Search

Date published: 2005-01-05       Date updated: 2011-01-17

Product:
Endpoint Protection

Module(s):
On demand scanner

Operations System(s):
Windows 2000
Windows 2003 Server

Problem description

When a regular user tries to scan files/folders on a terminal server, the following error message occurs and nothing is scanned:

An unexpected error occurred in Norman Virus Control

Module: NVCOD.EXE
Error code: 00000005
Error text: Access denied

Problem solution

Administrators may want the users to be able to scan items (files and folders) on a terminal server. To be able to do so, the users must be allowed to create global objects in the server’s local security settings. As of Windows 2000 service pack 4, users don‘t have this permission by default.

To grant necessary privileges 

  1. Open the (Windows) Control Panel on the server 
  2. Select Administrative Tools 
  3. Select Local Security Policy 
  4. Select Local Policies 
  5. Select User Right Assignment 
  6. Double-click Create local objects and add the users and/or groups that you want to allow using the Norman Virus Control right-click scanner. 
  7. Make sure that the Local Security Setting check box next to the user(s)/group(s) in question is selected.

Finally, the terminal server sessions must be logged off and on again to be assigned the new property.

If the terminal server disks are mapped as network drives, you must also remember to unselect “Files on network drives" from the On-demand scanner (exclude list) configuration in Norman Virus Control.