Regarding the suggestion: "As a general appliccable hotfix, you might consider to use an account being in the admin group while installing, and
being in the user mode while being productive and whenever possible. "
This goes back to the reason for my original post - that according to the
VMware Server Beta release notes under Installing VMware Server on a Windows Host: "Although you must be logged on as an administrator to
install VMware Server, you can run the program after it is installed as a user with normal user privileges."
In my testing, I did do an install using my normal working login name, temporarily given admin privileges for the install. I then removed admin privileges from my normal login account and found that: 1) my normal login account could launch both the VMware Server Console and the VMware Virtual Machine Console 2) No other login, administrator or not, could open either of these console windows to manage VMware Server.
I understand that I am evaluating on a non-supported host platform (Windows XP Pro). Would the product install registry keys differently on a
different windows server platform? There are about 130 vmappsdk.* keys and 37 vmdbCOM.* keys that have permissions only for the installing
login name and SYSTEM. I suspect that even on a server, local administration of VMware Server using the consoles (not using IIS, remote access, etc.) would be restricted to a single login account.
I'm very suprised this isn't documented by VMWare? Unless hardly anyone uses Windows with a normal user account or multiple accounts.
Wanted to note also that this occurs not only with Server edition, but also with Workstation (I'm using v5.5.1). You may also want to check this thread for more info, but which hasn't found a solution either: -
http://www.vmware.com/community/message.jspa?messageID=328409
Thank you for the heads up that this issue also exists on the Workstation product which I have been considering. You understand my point exactly. We should not be using an admin account for normal work, expecially testing! Since no account, admin or not, other than the installing account can run the product, the problem does not appear to be FOLDER permissions, but again, from my non-expert view, appears to be registry restrictions.
Can someone at VMware development comment?
\- Fix -
mainframevmguy, You were absolutely correct in stating that this problem may be due to the 'vmappsdk' and 'vmdbcom' registry keys.
In fact, to fix the problem, you would need to grant 'Read Only' access to 'Users' group to the following keys (and subkeys): -
HKEY_CLASSES_ROOT
vmappcfg.*
vmappsdk.*
vmc2vmx.*
vmdbcom.*
vmhwcfg.*
vmount2.*
vmware.*
vmwarevpccvt.*
Additionally, for file type association: -
HKEY_CLASSES_ROOT
.sv2i
.vmac
.vmba
.vmc
.vmdk
.vmsn
.vmss
.vmt
.vmtm
.vmx
.xvm
Thus, there are approximately over 320 registry keys that need their ACL (permissions) reset. I suggest assigning the following only: -
Administrators (group) - Full Access
System - Full Access
Users (group) - Read Only
This is clearly a huge overlook on the part of VMWare, which I'm fairly angry about as it took me a couple of days to trawl through regmon logs and to find all the keys as well as to write a script to reset the permissions.
Note however, that the above stated keys are only for the Workstation edition, so there may be many hundreds more for the Server edition.
To save time, I've created a batch script which resets the permission on all the above stated keys (and subkeys). You may download this from: -
http://www.wislam.co.uk/content/docs/vmware_0x80004003/vmware_0x80004003_fix.zip
The zip file contains a batch file and the subinacl.exe Windows resource kit utility. Simply unzip to an appropriate directory and run the batch file from your admin account.
\--
wislam at wislam.co.uk
Good work. Maybe VMware can pick up the changes and roll it into the next installer. ![]()
wislam - thanks for your reply. It sounds like you have an unofficial fix for workstation, for which I marked your reply helpful. I feel it is up to the vendor to supply any fixes for VMware Server that this brings to light . I just got an email about the need to download a new beta version. The email says "The beta version of VMware Server that you downloaded will expire on March 17th. " But when I do HELP/ABOUT for build 20923, it says - Expiration: 7/13/2006. Isn't that July 13, 2006? I don't know if there is a published list of bugs that are now fixed or new features added for the new Beta. I will be trying the new version anyways for my own technical knowledge.
For what it's worth I found a partial workaround for the problem I originally reported. My workaround for running VMware Server from a "normal login" on a Windows XP host:
\- Uninstall VMware Server if previously installed.
\- Temporarily add the normal login account to the Administrators group in the XP machine.
\- Install VMware Server from your normal login name while in the Administrators group.
\- Remove the normal login account from the Administrators group.
\- Shutdown/Restart XP (my practice after installs).
\- Login as the normal user and run VMware server.
I also see that the VMware Server install added a GROUP named __vmware__ and a USER named __vmware_user__ to Windows XP. Seems like a possible solution would be for the install process to enable VMware Server for the designated GROUP and let the local administrator add users to that group as needed.
I'm having the same problem with XP Professional. I installed it with one administrator account and am unable to start vmware from another admin account. I get the same error.
Did you ever fix this? I'm getting the error from the released version (downloaded this AM from VMware's website). I was trying to startup vmware so I could enter the serial numbers.
The original problem that I reported that started this thread still exists. I uninstalled my last beta VMware server first and then installed the VMware server release 1 from the downloaded VMware-server-installer-1.0.0-28343.exe under Windows XP Pro. Maybe no one cares about this error since XP PRO is not a "supported host". How disappointing after 4 months waiting for the general release! The documentation for Installing VMware Server on a Windows Host that states "Although you must be logged on as an administrator to install VMware Server, you can run the program after it is installed as a user with normal user privileges." would be much more accurate if it said "You can run the VMware Server program as a user with normal user privileges ONLY if that user is first temporarily made a local administrator for the purpose of installing VMware Server."
Thanks wislam. This worked perfectly. Workstation 5.5.2 still had the problem. C'mon VMware get on the ball!
I, too, installed VMware Server with a local administrator account, and then wanted to run it with a regular account. The "Application failure. hr = 0x80004003: (null)" error message popped up when I tried to open VMware Server Console.
After reading the discussion here, I sort of followed wislam's suggestion and changed all the permissions related to VMware Server to allow READ ONLY for Everyone. Now VMware Server Console runs successfully on my regular user account.
Hopefully next release of VMware Server will correctly set the permission so that the console can run with regular user account.
Great job; my problem is solved to.
I had the same fault message after installing VM Workstation 5.5.x on a Windows XP SP2 workstation.
i have this problem on a fresh install of version 6 on vista 32bit. run as administrator doesn't help. i dont reallly want to mess with that script as it wasn't written for vista...
i have this problem on a fresh install of version 6
on vista 32bit. run as administrator doesn't help. i
dont reallly want to mess with that script as it
wasn't written for vista...
Please check 'http://www.vmware.com/community/thread.jspa?messageID=627748#627748' I posted.
This seems like it will work, but I am a bit confused as to where the appropriate directory is. Could you possibly give me an example of what this directory might be? I am pretty sure that the two files must be in the same directory when you rune the .exe file, but that is about it.