Non-interactvie user account

[ranadhir nag]

We try to execute a console application as a noninteractive user (NT AUTHORITY/SYSTEM).This console application is supposed to launch an IE process ,and perform certain steps.But it fails to launch the IE browser - is this a characterisitc of such user accounts?If so,is there some way I can make this account launch the browser?I am able to launch the IE broswer successfulyl when i execute as a normal domain account

[f1shrman]

First, a question - are you trying to spawn the application from a service? If so, is the service configured so that it has the ability to interact with the desktop? If the service does not have the ability to interact with the desktop then the process will spawn, but it will run in background. So you will never see the application running.

I am not sure, but I think IE requires some settings from the HKCU hive and looks for and/or tries to write to the local settings folder in the spawning user's profile - the local system has neither of these which may be your problem.

Second, a thought - spawning any interactive application as the local system account is not a very good idea from a security perspective. Who ever is using the application can have access to the entire system at the highest of all possible rights.

If you really have to spawn an application from a service, then it would probably be better to spawn the application as a non-privileged account.

HTH