Page 1 of 1

MLS fails to start on new user account

Posted: Thu Jul 09, 2009 8:38 am
by rparker
I have a strange convergence of occurrences here, not sure where exactly to post it (so if this is the wrong place, admins, please feel free to move it).

Summary: MLS fails to load on a computer account created after the MLS 3.0 upgrade.

Background: the ward MLS machine was upgraded to 3.0 early (and has re-loaded 3.0 several times since). I'm assuming that these repeated installations are related to the mistakenly early deployed 3.0 release (discussed in other threads), and corrections/patches as they are made.

I have a newly called person who needs access to the computer and to MLS. I have created their login for MLS and their login to the ward computer.

Problem: When the person logs into the computer with their new computer account, and then attempts to launch MLS, it shows a progress bar and indicates that it is loading; however, the bar stops progressing at about 90% and never finishes loading. Checking Windows Task Manager, I can see that there are several javaw processes active, but nothing is really spinning the CPU.

If we use a preexisting (before MLS 3.0) computer account (we have tried several, both my admin level account and a normal user account), then MLS loads properly and displays the login screen. The new user is able to sign into MLS using their user name and password as expected.

Any advice on what to attempt in order to get the new user adequate access to MLS?

Rick Parker
Ward Clerk
San Antonio, TX

Posted: Thu Jul 09, 2009 8:52 am
by aebrown
RickParker wrote:I have a newly called person who needs access to the computer and to MLS. I have created their login for MLS and their login to the ward computer.

Problem: When the person logs into the computer with their new computer account, and then attempts to launch MLS, it shows a progress bar and indicates that it is loading; however, the bar stops progressing at about 90% and never finishes loading. Checking Windows Task Manager, I can see that there are several javaw processes active, but nothing is really spinning the CPU.
The problem is that you have created a separate Windows account with insufficient rights. This may seem like an entirely reasonable practice, and you'll get lots of sympathy from many security-minded technology specialists.

But the fact is that the Church instructions for installing MLS clearly state that there is to be one and only one Windows login used for MLS purposes. That is the user "CLERK", which has administrative privileges. Some parts of MLS may function under Power User privileges, but problems have been reported with that permission level as well.

See, for example, the "Securing the Dell 740" instructions on mls.lds.org, which state (speaking of the CLERK account):
Note: This is the computer administrator account. It is also the only account to be used to run MLS. Please do not allow this username or password to be changed.
So set your standard IT practices aside and follow the official Church instructions: run MLS under the Windows login CLERK and everything should work fine.

Resolved

Posted: Fri Nov 20, 2009 8:31 am
by rparker
Thanks for the pointer to the official instructions on account settings. Just wanted to report back that making the changes to one login account for the machine has been completed. All logins to MLS now work properly.

Rick Parker
Ward Clerk in San Antonio, TX