The cluster managing software for managing clusters on a windows server 2005 cluster had a checkbox for "allow application to interact with desktop" when creating a generic application resource. This appears to be gone in the management software for serve开发者_StackOverflow中文版r 2008 clusters. Does anyone know where this option, if it still exists, is?
From MattB on ServerFault, got this response.
This option was removed in Server 2008 as a security enhancement. This is because the application runs as the cluster service account which has elevated privileges.
Even in 2003 clusters, the security best practice was to not have this checked.
精彩评论