Re: Design Guidelines for Non-Power Users?

From: MikeD (nobody_at_nowhere.edu)
Date: 10/20/04


Date: Tue, 19 Oct 2004 20:23:10 -0400


"George" <nospam@please.com> wrote in message
news:OcoIRAgtEHA.2876@TK2MSFTNGP14.phx.gbl...
> Hi,
>
> I am building a VB6 application that will need to run with limited (user)
> privileges. I understand that non-power users only have write access to a
> few specific directories on the system, as well as very limited registry
> access.
>
> However, I cannot find a definitive guide as to exactly what resources are
> available to limited users. Do you know of any such listing? What are the
> guidelines to building VB6 applications that will be run in limited mode?
>

The following is primarily intended as general information.

Non-Power Users and Admins will not be able to install your app. The app
must be installed under a login that has PowerUser or Admin rights. However,
if the app is installed for All Users, then the "regular" users (referred to
as just Users from here on) should be able to run it.

Users may very well be restricted from reading, and particularly writing to,
various folders on their own hard drives. Any information your app needs to
write to disk should probably be written to an appropriate folder in the
User's profile directory (for example, H:\Documents and Settings\User
Name\Application Data). You can get whatever this folder happens to be by
calling the SHGetSpecialFolderLocation API function. For code examples of
calling that function, search www.google.com. Obviously, there are a number
of other folders the User shouldn't have any problem reading/writing, such
as their own My Documents folder. It's quite possible the User WON'T have
write permissions for even the application's folder (the folder the app is
installed to), though. If they don't have write permissions, this could
cause problems For example, if your app opens an Access database located in
that folder, you might not be able to open a connection to it because Jet
can't create the lock file.

The only part of the Registry a User has write permissions for is
HKEY_CURRENT_USER (and most subkeys). However, a User should have read
permissions for most other parts of the Registry (for example,
HKEY_LOCAL_MACHINE).

Here's the best advice I can think of to give you: TEST your app very
thoroughly on a PC (and other than your dev PC) under a login that will have
the exact same permissions as the users who will be using your app (IOW, a
login that belongs only to the Users group plus whatever other special
permissions, if any, they might be granted). You may need to consult with
the SysAdmin on this.

Mike



Relevant Pages

  • Re: New install of XP
    ... you can set XP Home permissions in Safe Mode. ... Open Explorer, go to Tools and Folder Options, on the view tab, scroll to ... >>Was this a clean install or did you install over a> previous setup? ...
    (microsoft.public.windowsxp.basics)
  • Re: More before-the-fact advice for 2K and XP?
    ... neither ActiveX nor BHO require Admin permissions to ... given that non-admins have a significant amount of control over ... "Would you like to install the ... With executable white listing, the app doesn't just ...
    (microsoft.public.security)
  • Re: cant publish, author permissions issue
    ... copied them to disk and stuck them into a frontpage folder on the newer ... machine-- that folder, i believe, was part of ms office but was empty because ... and so had to wait until another disk was purchased before i could install on ... The Permissions will normally be grayed out on your local machine as they can not be published ...
    (microsoft.public.frontpage.extensions.windowsnt)
  • Re: Installing data files with application?
    ... Have Setup install the files into your APP FOLDER. ... Create a Setting in your app called FirstRun and scoped to USER. ... I dont see where the zip thing totally solves the problem. ...
    (microsoft.public.dotnet.languages.vb)
  • Re: Ids in Administrator Group
    ... the Permissions should now be OK. ... I noticed during the install process when the program asked to select ... "torbar" wrote: ... This is the default folder where all programs are installed. ...
    (microsoft.public.windowsxp.help_and_support)