Re: Administrator vs limited account

From: Carrie Garth (PostInGroup_at_invalid.cxg)
Date: 04/18/04


Date: Sun, 18 Apr 2004 06:55:47 -0500


> "PAUL SIMON" <disneyholic@earthlink.net.INVALID> wrote in message
> news:hFWfc.10937$zj3.672@newsread3.news.atl.earthlink.net...
> I am running a system that has XP Professional. I have my account which is
> set up as an administrator account, and I have accounts for my kids that are
> set up as "limited" accounts. When they play a game that wants to save data,
> it basically tells them they can't and then exits. I suspect this is because
> it is in the limited mode. Is there a way to "adjust" windows to allow them
> to save their data from their game?

As others have mentioned, the problem is likely that the default permissions
given to members of the "limited" account (the Users group) are too stringent
for the "game that wants to save data". As such, it will not run successfully.

Some options are to:

- Contact the application developer to obtain the list of objects (files, folders
and/or registry keys) that need relaxed permissions and relax permissions on those
objects. For more information about how "To set, view, change, or remove file and
folder permissions", and how "To assign permissions to a registry key" see the
Help and Support Center topic by those titles.

- Allow users of such applications to be members of the Power Users group
and hope that this relaxes permissions enough. For more information about
the "Power Users" group see the Help and Support Center topics titled:
"Groups overview", "Default security settings", and "Privileges". For
information about how "To add a member to a group", see the Help and Support
Center topic by that title.

- Apply the predefined incremental security templates named compatws.inf
(Compatible) and hope that this relaxes permissions enough. For information
about "Predefined security templates" and how to "Apply a security template
to local policy", see the Help and Support Center topics by those title.

- Use the Sysinternals tools Filemon and Regmon to monitor the programs'
access to files, folders and registry keys. Then search Regmon for "ACCDENIED" and
Filemon for "FAILURE", and then relax permissions on those objects.

For more information about Regmon and Filemon see:

Sysinternals Freeware - Information for Windows NT and Windows 2000
http://www.sysinternals.com/ntw2k/utilities.shtml



Relevant Pages

  • Re: "DropMyRights" slows IE browsing to a crawl
    ... > I'm not sure why using RunAs wouldn't work just as well. ... > you run the application under a reduced set of permissions. ... > Just pick an account that exists that has the reduced permissions that you ... like Guest or one you create that is in the restricted Users group. ...
    (microsoft.public.windows.inetexplorer.ie6.browser)
  • Re: Administrator vs limited account
    ... I have my account which is ... the problem is likely that the default permissions ... given to members of the "limited" account (the Users group) are too stringent ... Help and Support Center topic by those titles. ...
    (microsoft.public.windowsxp.general)
  • Re: Administrator vs limited account
    ... I have my account which is ... the problem is likely that the default permissions ... given to members of the "limited" account (the Users group) are too stringent ... Help and Support Center topic by those titles. ...
    (microsoft.public.windowsxp.basics)
  • Re: Missing Users folder under management
    ... Yes, that would be correct, as permissions do not apply in FAT32. ... >> support contacts ... ... >>> That last piece is the account name, followed by a colon, ...
    (microsoft.public.windowsxp.general)
  • Re: NT AUTHORITYNetwork Service cant write to .NET Directory?
    ... ASP.NET process identity(the IIS worker process account), ... Here are two articles introduce setup the proper permissions for ASP.NET ... Microsoft MSDN Online Support Lead ... where an initial response from the community or a Microsoft Support ...
    (microsoft.public.dotnet.framework.aspnet.security)