Re: System Registry Service

From: Sharon F (sharonfDEL_at_ETEmvps.org)
Date: 03/13/04 

Date: Sat, 13 Mar 2004 08:06:01 -0600

On Thu, 11 Mar 2004 11:26:12 -0800, Dan Kosko wrote:

> Sharon,
>
> Thank you!!!! that did the trick allowing me to edit the registry. Now
> how do I go about being able to run software without using the "run as"
> drop down?. Still cannot click on icons and get them to run.Nothing is
> being run in the startup unusual but dont know where to look in the
> registry that may be preventing the icons from running when being
> clicked. Any ideas?
>
> Thx again
>
> Dan

I'm glad you got a little further in resolving this. I not sure what should
happen next. You can use RunAs and supply credentials that allow you to run
programs. It sounds like permissions and policies have been tampered with
(not unusual with some of the malware out there these days) but I can't
tell which ones. A few things to try:

--If the intrusion you had on your machine was identified by name, look it
up. If your antivirus vendor doe not maintain a comprehensive online
resource for this, use one of the others: Symantec, McAfee, etc. The
details of what changes a particular intrusion makes on a system are
covered and the necessary steps to reverse those changes are covered too.

--Create a new shortcut to one of the programs. See if it works with just a
double click.

--Create a new user account in the Administrator group and see if it has
the same problems.

--Check permissions for the Program Files folder and for the folders of
individual programs. Right click on the folder and select Properties. Look
at the Security page. The Administrators group should be showing Full
Control (all boxes checked except Special Permissions). If you have XP
Home, you'll need to boot to Safe Mode to see this page of Properties.

Another tool from MVP Doug Knox is "Security Console. It may be able to
help you with this too:
http://www.dougknox.com/xp/utils/xp_securityconsole.htm 

-- 
Sharon F
MS MVP - Windows XP Shell/User

Relevant Pages

  • Re: Limited User program permissions
    ... Quite simply, the application doesn't "know" how to handle individual user profiles with differing security permissions levels, or the application is designed to make to make changes to "off-limits" sections of the Windows registry or protected Windows system folders. ... "If your game or application works with admin accounts, but not with limited accounts, you can fix it to allow limited users to access the program files folder with "change" capability rather than "read" which is the default. ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Admin vs. Normal Access
    ... Quite simply, the application doesn't "know" how to handle individual user profiles with differing security permissions levels, or the application is designed to make to make changes to "off-limits" sections of the Windows registry or protected Windows system folders. ... "If your game or application works with admin accounts, but not with limited accounts, you can fix it to allow limited users to access the program files folder with "change" capability rather than "read" which is the default. ...
    (microsoft.public.windowsxp.newusers)
  • Re: Softeware not working for all users
    ... Quite simply, the application doesn't "know" how to handle individual user profiles with differing security permissions levels, or the application is designed to make to make changes to "off-limits" sections of the Windows registry or protected Windows system folders. ... "If your game or application works with admin accounts, but not with limited accounts, you can fix it to allow limited users to access the program files folder with "change" capability rather than "read" which is the default. ...
    (microsoft.public.windowsxp.help_and_support)
  • Re: administration rights
    ... Quite simply, the application doesn't "know" how to handle individual user profiles with differing security permissions levels, or the application is designed to make to make changes to "off-limits" sections of the Windows registry or protected Windows system folders. ... "If your game or application works with admin accounts, but not with limited accounts, you can fix it to allow limited users to access the program files folder with "change" capability rather than "read" which is the default. ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Application installation security issues
    ... Quite simply, the application doesn't "know" how to handle individual user profiles with differing security permissions levels, or the application is designed to make to make changes to "off-limits" sections of the Windows registry or protected Windows system folders. ... "If your game or application works with admin accounts, but not with limited accounts, you can fix it to allow limited users to access the program files folder with "change" capability rather than "read" which is the default. ...
    (microsoft.public.windowsxp.help_and_support)