views:

69

answers:

1

The cluster managing software for managing clusters on a windows server 2005 cluster had a checkbox for "allow application to interact with desktop" when creating a generic application resource. This appears to be gone in the management software for server 2008 clusters. Does anyone know where this option, if it still exists, is?

A: 

From MattB on ServerFault, got this response.

This option was removed in Server 2008 as a security enhancement. This is because the application runs as the cluster service account which has elevated privileges.

Even in 2003 clusters, the security best practice was to not have this checked.

David

related questions