SQLPLUS – Windows – Administator only….

Came across this little chsnut on win2k recently – how to make SQLPLUS work on Citrix – with non admin users – handy alright! – This works a charm. 

Applies to:
Oracle Server – Enterprise Edition – Version: to Oracle Server – Standard Edition – Version: to Microsoft Windows 2000 Microsoft Windows XP Microsoft Windows Server 2003 Symptoms

When logged on to the Windows server as a non-Administrator OS account using Microsoft Terminal Services client (mstsc.exe), starting SQL*Plus fails with

SP2-1503: Unable to initialize Oracle call interface
SP2-0152: ORACLE may not be functioning properly

Starting SQL*Plus works when logged on to the Windows server using an Administrator OS account.

Starting SQL*Plus works when logged on locally to the Windows server console using the non-Administrator OS account.

The issue is related to a Windows Security configuration. The problem is caused by a security policy called “Create Global Objects”. The user account that is used to run the program does not have the “Create global objects” user right. This security policy was introduced with Windows 2000 SP4, and determines if applications started during a Terminal Services session can create or access globally accessible memory. By default, members of the Administrators group, the System account, and Services that are started by the Service Control Manager are assigned the “Create global objects” user right.
Assign the “Create global objects” user right to the non-Administrator account.

1. Click Start, point to Programs, point to Administrative Tools, and then click Local Security Policy.
2. Expand Local Policies, and then click User Rights Assignment.
3. In the right pane, double-click Create global objects.
4. In the Local Security Policy Setting dialog box, click Add.
5. In the Select Users or Group dialog box, click the user account that you want to add, click Add, and then click OK.
6. Click OK.



13 thoughts on “SQLPLUS – Windows – Administator only….

  1. Hello Thank you for your HELP!! Solved me an issue on Windows 7. Adding some more related messages to help future users. ODBC Error , sqlstate=im004 , SQL_HANDLE_ENV , sqlallochandle

  2. i am facing the same issue SP2-1503: Unable to initialize Oracle call interface
    SP2-0152: ORACLE may not be functioning properly after following the above steps on my windows 7, in admin account it’s working fine, not on the user account, but my user account has a admin previlage

    • Even iam facing the same issue. When i run sqlplus as an administrator, it is invoking. But when i run sqlplus using my account (belongs to administartor group),
      sql plus is getting invoked and immediately closing. Please help me.

  3. Thank you very much, I knew there is a problem with creating object but didn’t knew how to set the right.

  4. In addition to it, the complete SPAM protection of your
    weblog is guaranteed. Expertise: The web designers who are experts in this latest technique
    have the ability to offer the best services regarding theme and plug-ins customization.

    Therefore, you can easily devise your special settings for your

  5. Very nice post! This problem is a baffling one. This happens not only to the user, but also to the Admin with UAC turned on (then Admin runs programs in normal mode). Also, it’s not just SQL*Plus that was affected. I was running a Powerbuilder application that wouldn’t “see” the Oracle drivers. I didn’t know about “create globals” earlier, so I ended up in running the program as Administrator as a workaround. Then I stumbled on your post and was able to run my program without admin rights and now both SQL*Plus and my PB app. work fine against Oracle. Thank you!

  6. Thank you so much for this post, What had me confused was this was a non issue running XP. However, when I migrated the users to a Window 7 machines I knew there must have been some issue with writing files to directory the user did not have permission for. In window XP once I configured the network profile and saved as an Admin I was able to execute the oracle driver as the Domain user.

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out /  Change )

Twitter picture

You are commenting using your Twitter account. Log Out /  Change )

Facebook photo

You are commenting using your Facebook account. Log Out /  Change )

Connecting to %s