If you are getting the following exception while trying to convert native Microsoft Office documents using LiveCycle PDF Generator ES2 on Windows Server 2008, try running the appserver as a Windows service running as the ‘Local System’ account with the service “allowed to interact with desktop”.
“Error Code:1000
Error message from the primary converter:
ALC-PDG-001-000-Conversion of the input file failed because of an exception.
An unexpected exception while resolving a new connection to an Adobe Service.”
On the appserver log, you might see something like this:
INFO [STDOUT]
ERROR: API = CreateProcessAsUser
INFO [STDOUT] ERROR CODE = 1314
MESSAGE = A required privilege is not held by the client.
WARN [com.adobe.service.ProcessResource] BMC024: Service PDFMakerSvc: Process ProcessResource@6981ceb6(name=pdfgen.exe,pid=0) terminated abnormally with error code {3}
…
ERROR [com.adobe.util.ConnectionFactoryReflectionWrapper] UTIL001: Unexpected exception while resolving a new connection to an Adobe Service
java.lang.reflect.InvocationTargetException
Please see here for instructions on how to create a Windows service for JBoss. Once this is configured, the server log should have an entry such as this:
INFO [com.adobe.pdfg.ConfigServiceOnLoad] Application server started as user: YOURSERVERNAME$
For IBM WebSphere, see here.
If you continue to have problems, ensure that you have performed the following:
1) Disabled User Account Control (UAC).
You can use msconfig.exe. In theTools tab, choose “Disable UAC” and click the ‘Launch’ button. This will run the following command:
C:\Windows\System32\cmd.exe /k %windir%\System32\reg.exe ADD HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System /v EnableLUA /t REG_DWORD /d 0 /f. In Windows 7, you have to turn off UAC completely.
2) All configured multi-threaded users belong to the ‘Local Administrators’ group
3) All of them have the ‘Replace a Process Level Token’ system privilege.
Using Group Policy Editor (gpedit.msc), navigate to Computer Configuration->Windows Settings->Security Settings->Local Policies->User Rights Assignment.
4) You have logged in as each of these multi-threaded users one by one, started Acrobat and dismissed any dialogs and did the same for each and every native application (Word, Excel, PowerPoint, Visio etc.) Please note that one of the Acrobat dialogs (Improve User Experience) only gets displayed after a few invocations of Acrobat.
Should this also work on Windows Server 2008 R2? x64? We have that error, but all your suggestions in place. Working with support, but was hoping to ask directly since this fits our issue so precisely.
Colin:
Yes, I have it working on Windows Server 2008 R2 x64. Support for Windows Server 2008 R2 started with ES2 SP1. Does the System Readiness Tool (SRT) script report any errors or warnings?
You said, “…try running the appserver as a Windows service running as the ‘Local System’ account with the service ‘allowed to interact with desktop’.” We have found that this is the only way to resove the problem that we’re having using Windows Server 2008 R2 x64. However, running as Local System isn’t sufficient because we need to access remote file systems and hence need to be running as a domain user that has permissions to those remote file systems. There is no way to give “Local System” permission to our file shares. Is there another way around this problem? We’ve been battling this issue for a couple of months now. To get around it in our dev environment we run LiveCycle manually (run.bat -c lc_turnkey -b 0.0.0.0) as the domain user and it works. We’ve also found a strange work-around where we first run the service as “Local System” and then restart the service running as our domain user… and that seems to work as well (until we reboot the box and then we have to go back through the process of switching to “Local System” and back to domain user). Obviously, neither of these work-arounds are going to work in production.
Gil:
If the network share is a Windows file share, Windows will allow you to add the SYSTEM account of any domain computer running PDF Generator (COMPUTERNAME$) to the SHARE list. You will have to provide Read and Write permissions to this SYSTEM account. This has worked in our Engineering lab. There has also been reports that this won’t work if the network share is hosted on NAS devices.
Been tearing my hair out over this error message, was getting a CLASSPATH error to start with that was rectified when I re-booted the server (what’s all that about). Anyway I’m gonna give this a shot as Adobe haven’t come back to us yet…