Re: Admin vs limited accounts

Tech Tip: Click here to run a free scan for Windows Errors and optimize PC performance

Michael C. wrote:
I would like to use the security features of Windows xp Pro. However, whenever I try to use a limited account to do everyday tasks some things just don't work.

I have a few applications scheduled to begin when I log in or startup my machine. Some of these apps. need to alter system files in order to function. In a limited user account they show up as errors and will not allow software to run.

So I'm confused about which way to go here.


You may experience some problems if the software was designed for Win9x/Me, or if it was intended for WinNT/2K/XP, but was improperly designed. Quite simply, the application doesn't "know" how to handle individual user profiles with differing security permissions levels, or the application is designed to make to make changes to "off-limits" sections of the Windows registry or protected Windows system folders.

For example, saved data are often stored in a sub-folder under the application's folder within C:\Program Files - a place where no inexperienced or limited user should ever have write permissions.

It may even be that the software requires "write" access to parts of the registry or protected systems folders/files that are not normally accessible to regular users. (This *won't* occur if the application is properly written.) If this does prove to be the case, however, you're often left with three options: Either grant the necessary users appropriate higher access privileges (either as Power Users or local administrators), explicitly grant normal users elevated privileges to the affected folders and/or part(s) or the registry, or replace the application with one that was properly designed specifically for WinNT/2K/XP.

Some Programs Do Not Work If You Log On from Limited Account
http://support.microsoft.com/default.aspx?scid=kb;EN-US;q307091

    Additionally, here are a couple of tips suggested, in a reply to a
different post, by MS-MVP Kent W. England:

"If your game or application works with admin accounts, but not with
limited accounts, you can fix it to allow limited users to access the
program files folder with "change" capability rather than "read" which
is the default.

C:\>cacls "Program Files\appfolder" /e /t /p users:c

where "appfolder" is the folder where the application is installed.

If you wish to undo these changes, then run

C:\>cacls "Program Files\appfolder" /e /t /p users:r

If you still have a problem with running the program or saving
settings on limited accounts, you may need to change permissions on
the registry keys. Run regedit.exe and go to HKLM\Software\vendor\app,
where "vendor\app" is the key that the software vendor used for your
specific program. Change the permissions on this key to allow Users
full control."


--

Bruce Chambers

Help us help you:
http://dts-l.org/goodpost.htm
http://www.catb.org/~esr/faqs/smart-questions.html

You can have peace. Or you can have freedom. Don't ever count on having both at once. - RAH
.

Relevant Pages

  • RE: limited user cant print
    ... changed the printer setup from spooling to printing directly. ... allow printing from the limited account, but as noted by HDBob, printing is ... As noted by Steve and Rick, I can only access the permissions when booting ... Set up the following folders as shared: ...
    (microsoft.public.windowsxp.general)
  • Re: limited vs administer account
    ... I have other programs that work only in administer account, but not in limited account. ... Quite simply, the application doesn't "know" how to handle individual user profiles with differing security permissions levels, or the application is designed to make to make changes to "off-limits" sections of the Windows registry or protected Windows system folders. ...
    (microsoft.public.windowsxp.general)
  • Re: Program Requires Administrator Rights
    ... When you try to start it under a limited account, it tries to copy a file to the Windows directory and of course can't because it is a limited account. ... Quite simply, the application doesn't "know" how to handle individual user profiles with differing security permissions levels, or the application is designed to make to make changes to "off-limits" sections of the Windows registry or protected Windows system folders. ...
    (microsoft.public.windowsxp.help_and_support)
  • Re: Software problems with a Limited Account
    ... The problem I am experiencing is that some programs, such as Acrobat, do not function correctly in a Limited Account. ... Quite simply, the application doesn't "know" how to handle individual user profiles with differing security permissions levels, or the application is designed to make to make changes to "off-limits" sections of the Windows registry or protected Windows system folders. ...
    (microsoft.public.windowsxp.help_and_support)
  • Re: Problems with security issues
    ... access rights to the folders you want to use (or, ... > stores files in subdirectories of the application's folder. ... It didn't work on the limited account. ...
    (microsoft.public.dotnet.framework)