Index  | Recent Threads  | Unanswered Threads  | Who's Active  | Guidelines  | Search
 

Quick Go ยป
No member browsing this thread
Thread Status: Active
Total posts in this thread: 9
[ Jump to Last Post ]
Post new Thread
Author
Previous Thread This topic has been viewed 1634 times and has 8 replies Next Thread
Former Member
Cruncher
Joined: May 22, 2018
Post Count: 0
Status: Offline
Reply to this Post  Reply with Quote 
BOINC on Windows 10 using standard user instead of administrator

I would like to run the WCG BOINC client while I am logged in as my standard user account on Windows 10.
When I run the BOINC manager (boincmgr.exe) the first error message is this:
"Could not set current working directory (error 0: the operation completed successfully.)"
After passing that, the manager status bar has the message "Connecting to localhost".
It eventually times out and displays the next error dialog:
"You currently are not authorized to manage the client. Please contact your administrator to add you to the 'boinc_users' local user group." and then the status bar indicates "Disconnected".

I have followed the instructions from the Berkeley Installing BOINC site...
https://boinc.berkeley.edu/wiki/Installing_BOINC
...but still have these problems.
Here are the steps I took...
While logged in as a standard user, ran the install. Entered the administrator credentials when prompted by the installer.
Selected advanced install options to install in "private mode" (for the installing user and the admin).
Created the "boinc_users" group and added both the administrator account and my standard user account as members of this group and logged off/on.

If I run the BOINC manager (boincmgr.exe) using the administrator credentials, then it works correctly. So, this does not appear to be a network or firewall configuration issue.
OS: Windows 10 Pro (1909)
BOINC 7.14.2 (x86)

There does appear to be another install option for a "Service Install". The BOINC site indicates this will "Run project applications under an unprivileged account." However, it's not clear if this runs BOINC as a Windows Service (which is not what I am trying to do).

I'm a long-time user and have been running on this hardware and OS for some time.
Last year I decided to improve my security by converting my user account to a standard user instead of always running with admin permissions. I've not been running WCG/BOINC since then because of this problem.
[Jan 21, 2020 3:39:06 AM]   Link   Report threatening or abusive post: please login first  Go to top 
halldor.usa
Advanced Cruncher
USA
Joined: Nov 24, 2006
Post Count: 115
Status: Offline
Project Badges:
Reply to this Post  Reply with Quote 
Re: BOINC on Windows 10 using standard user instead of administrator

This sounds as if it can be a problem with User Rights to access the BOINC client. I don't have the details handy, you may be able search the Internet for the proper way to check that.
[Jan 21, 2020 4:00:09 AM]   Link   Report threatening or abusive post: please login first  Go to top 
hchc
Veteran Cruncher
USA
Joined: Aug 15, 2006
Post Count: 807
Status: Recently Active
Project Badges:
Reply to this Post  Reply with Quote 
Re: BOINC on Windows 10 using standard user instead of administrator

emcinerney said:
I would like to run the WCG BOINC client while I am logged in as my standard user account on Windows 10.

That's what I'm doing. I rarely if ever log in directly as the Local Admin account. Hope I'm able to help you.

When I run the BOINC manager (boincmgr.exe) the first error message is this:
"Could not set current working directory (error 0: the operation completed successfully.)"
After passing that, the manager status bar has the message "Connecting to localhost".
It eventually times out and displays the next error dialog:
"You currently are not authorized to manage the client. Please contact your administrator to add you to the 'boinc_users' local user group." and then the status bar indicates "Disconnected".

This sounds like it was installed as a Windows service upon the initial installation, since I don't believe the 'boinc_users' group (or any local groups or users) are created when you install it not as a service. I would actually uninstall completely.

I have followed the instructions from the Berkeley Installing BOINC site...
https://boinc.berkeley.edu/wiki/Installing_BOINC
...but still have these problems.
Here are the steps I took...
While logged in as a standard user, ran the install. Entered the administrator credentials when prompted by the installer.
Selected advanced install options to install in "private mode" (for the installing user and the admin).
Created the "boinc_users" group and added both the administrator account and my standard user account as members of this group and logged off/on.

Those instructions [to create the groups] really apply when it's running automatically as a Windows service. Those groups/users allow that user to run BOINC Manager (boincmgr.exe), but the actual boinc.exe and the science binaries are run under the service account.

David Anderson also commented that many of the articles there are years/decades out of date.

Personally -- as much as I would prefer to have it run as a service so I don't have to stay logged in 24/7 -- I've had issues with BOINC under Windows when installed as a service. I reinstalled as a non-service and only run it when logged in as the standard user account 24/7 and just lock the computer when I'm not using it.

If I run the BOINC manager (boincmgr.exe) using the administrator credentials, then it works correctly. So, this does not appear to be a network or firewall configuration issue.
OS: Windows 10 Pro (1909)
BOINC 7.14.2 (x86)

There's a 64-bit version of the BOINC application. I'd uninstall the current 32-bit version and re-download the 64-bit one directly from https://boinc.berkeley.edu/download.php

There does appear to be another install option for a "Service Install". The BOINC site indicates this will "Run project applications under an unprivileged account." However, it's not clear if this runs BOINC as a Windows Service (which is not what I am trying to do).

Yep, that's what that install option does: it creates a BOINC Windows service along with the local users and local groups and sets the NTFS permissions accordingly. It's a pain since if you have multiple standard user accounts and don't want the BOINC Manager to pop up when they log in, it's wonky getting the Options in BOINC Manager to stick. As well as sometimes playing with the Registry.

I'm a long-time user and have been running on this hardware and OS for some time.
Last year I decided to improve my security by converting my user account to a standard user instead of always running with admin permissions. I've not been running WCG/BOINC since then because of this problem.

Bravo! I remember when I stopped tempting fate by running as Local Admin as my daily driver! It's been a great change in mindset. Anyways, the way the current architecture is designed for BOINC and BOINC Manager to be installed and run as a Windows service is wonky as heck, and there's a nice long discussion on them totally re-designing how it's done to take advantage of a bunch of new security features in Windows. Here's the link on the BOINC GitHub page to that discussion:
[WIP] Boinc security and user separation improvement - Pull Request #2831

Point being, at this point it's more of a pain to run BOINC as a Windows service rather than just as the standard user account. I think with regard to what you are seeing, it looks like it was installed originally as a Windows service (or at least thinks it was), so a fresh install seems the most sane approach. Plus I think it's just better running the 64-bit instead of the 32-bit.
----------------------------------------
  • i5-7500 (Kaby Lake, 4C/4T) @ 3.4 GHz
  • i5-4590 (Haswell, 4C/4T) @ 3.3 GHz
  • i5-3570 (Broadwell, 4C/4T) @ 3.4 GHz

----------------------------------------
[Edit 5 times, last edit by hchc at Jan 22, 2020 2:41:05 AM]
[Jan 22, 2020 2:29:23 AM]   Link   Report threatening or abusive post: please login first  Go to top 
Former Member
Cruncher
Joined: May 22, 2018
Post Count: 0
Status: Offline
Reply to this Post  Reply with Quote 
Re: BOINC on Windows 10 using standard user instead of administrator

There's 2 modes of installation for BOINC: User(default) and Service(advanced). When installing as User you really should not be asked about administrator authorization, UNLESS, for instance a group policy is set on the device.

Edit: User really only runs when User signs in. When installed as Service, then it always runs, signed in or not. Latter would require to have the User added to the BOINC Manager / BOINC groups. I Always choose "All Users" in the installation advanced options. BOINC Manager access can still be limited.
----------------------------------------
[Edit 4 times, last edit by Former Member at Jan 22, 2020 1:21:24 PM]
[Jan 22, 2020 10:02:46 AM]   Link   Report threatening or abusive post: please login first  Go to top 
Former Member
Cruncher
Joined: May 22, 2018
Post Count: 0
Status: Offline
Reply to this Post  Reply with Quote 
Re: BOINC on Windows 10 using standard user instead of administrator

Just thinking about this, you can make the service install to launch only manually in the service properties of services.msc. Then when the user is added to the appropriate groups, you could set BOINC Manager to launch the client. Just not sure as vaguely recollect, BM would not do that, but the other options suggest so with tick boxes for

Run Manager at Login
Run The Client

If that (does not) works, let us either way.
[Jan 22, 2020 1:25:44 PM]   Link   Report threatening or abusive post: please login first  Go to top 
Former Member
Cruncher
Joined: May 22, 2018
Post Count: 0
Status: Offline
Reply to this Post  Reply with Quote 
Re: BOINC on Windows 10 using standard user instead of administrator

Thanks everyone for the replies.
I plan to do the following sometime soon and report back:

Uninstall.
Download/Install the x64 bit version directly from the Berkeley/BOINC site and install that.

To clarify, I am *not* trying to install/configure to run as a service...I only want it running when I'm logged in under my user acct.

Worst case, if I/we can't get it to work as desired, I can just run the boincmgr.exe under my standard user acct by manually elevating privileges (which is what I'm currently doing).

I agree that the various documentation is outdated and needs updating (which is in large part why I decided to post to the forum in detail).
The references to XP and even Windows 95 I would imagine could be removed.

It's also a bit confusing that the download from the WCG site for Windows returns the x86 version of the installer when the Berkeley/BOINC site doesn't even offer it x86, only x64.
[Jan 22, 2020 11:36:18 PM]   Link   Report threatening or abusive post: please login first  Go to top 
Former Member
Cruncher
Joined: May 22, 2018
Post Count: 0
Status: Offline
Reply to this Post  Reply with Quote 
Re: BOINC on Windows 10 using standard user instead of administrator

Berkeley does offer x86, but it senses the OS connecting and pushes the right bit size. There's an All versions link to get at other and older releases to include beta versions.

32 bit has no impact at all on performance. It is still able to manage the science apps that are available in 64 bit, most of them at WCG.

Edit: The All Versions link.https://boinc.berkeley.edu/download_all.php
----------------------------------------
[Edit 1 times, last edit by Former Member at Jan 23, 2020 9:03:33 AM]
[Jan 23, 2020 9:02:19 AM]   Link   Report threatening or abusive post: please login first  Go to top 
Former Member
Cruncher
Joined: May 22, 2018
Post Count: 0
Status: Offline
Reply to this Post  Reply with Quote 
Re: BOINC on Windows 10 using standard user instead of administrator

OK, so I appear to be running as desired now...
I downloaded/installed the X64 bit version from the Berkeley site.
(It did still prompt for admin creds when running the install.)
Using the Advanced install options, I only unchecked the "Use BOINC Screensaver" option.
(I left the the "Allow all users on this computer to control BOINC" option checked...it's still unclear to me what this does, but since I'm really the only user, I don't care.)
I now appear to be able to run the app under my standard user account. (Yay!)

FYI, I also am using the Intel XTU (Xtreme Tuning Utility) and am so far able to OC my Intel 3570K from a max turbo of 3.8 to 4.2GHz. I'll just have to see if this maintains and/or if I can try to tweak it a bit more.
[Jan 24, 2020 5:45:43 AM]   Link   Report threatening or abusive post: please login first  Go to top 
Former Member
Cruncher
Joined: May 22, 2018
Post Count: 0
Status: Offline
Reply to this Post  Reply with Quote 
Re: BOINC on Windows 10 using standard user instead of administrator

You going into advanced and taking options like All User IS an administrator level activity. It's also the place to choose if service or not. Just tried with the latest beta and that was ticked. To be expected as my current install is service.

That screen gives the option to choose where to install the data as well. Separate disk partition or fast USB memory drive is optimal.

Anyways, good you're running now in User Signed in only mode.
----------------------------------------
[Edit 1 times, last edit by Former Member at Jan 24, 2020 9:20:45 AM]
[Jan 24, 2020 9:19:48 AM]   Link   Report threatening or abusive post: please login first  Go to top 
[ Jump to Last Post ]
Post new Thread