Desktop Icons and Least User Privilege

XP SP2

We are in the process of restricting all our employees to standard user
accounts on the desktop. For the most part this has all gone just fine, but
today I ran into a problem that I have not previously encountered. I
converted a group of users to standard user accounts and all of them lost
the ability to launch Attachmate Extra from the desktop icon. Now, I tested
Extra in advance and found that I needed to tweak the NTFS permissions to
make it run as a standard user, and I added the appropriate file rights to
our group policy. In fact, I currently have standard users running Extra
without problems, so I know that I've got that end of things nailed down.
The problem today was that the desktop icon does not work, and when I
checked the properties of the icon I found that all the fields had been
emptied out. This situation never arose in our testing.

I have the same problem with another product called BeyondCompare.

Both the Extra and BeyondCompare icons are located on the All Users desktop.
There are other icons on the All Users desktop that appear to have been
unaffected, or at least no one complained about them today.

Does anyone know why the icons for these two products were essentially made
into empty shells simply by removing the admin rights of the user? Does
this have something to do with the way the installation packages for these
products created the shortcuts? Also, can I possibly fix the problem by
giving the user rights to those specific icons via the group policy?

Any information you can offer will be greatly appreciated.

--Tom


.

Relevant Pages

  • Re: Desktop Icons and Least User Privilege
    ... I converted a group of users to standard user accounts and all of them lost the ability to launch Attachmate Extra from the desktop icon. ... Now, I tested Extra in advance and found that I needed to tweak the NTFS permissions to make it run as a standard user, and I added the appropriate file rights to our group policy. ... There are other icons on the All Users desktop that appear to have been unaffected, or at least no one complained about them today. ... We have users connecting to TS via RDP, and I had to add user rights to the specific icons in order for the user to gain access to the program. ...
    (microsoft.public.windowsxp.general)
  • Venting - Office 2007 reactivation
    ... I've been having increasing problems with Office Pro 2007. ... If UAC was enabled Office would tell me it wasn't installed ... even in the Administrator accounts and the open program would be closed. ... And Office still doesn't run on standard user ...
    (microsoft.public.office.setup)
  • Re: Icons and taskbar do not load upon bootup
    ... There are no icons or programs loading at all for the ... user accounts in question. ... I'm not certain which programs were loaded under what user account ... You don't say what the "icons or related programs in the system tray" ...
    (microsoft.public.windowsxp.help_and_support)
  • Re: How to get rid of mini-player "toast"?
    ... This posting is provided "AS IS" with no warranties, and confers no rights. ... icons that I frequent. ... the toast is wired into the mini-player skin's script. ... visualization window. ...
    (microsoft.public.windowsmedia.player)
  • Re: How to get rid of mini-player "toast"?
    ... This posting is provided "AS IS" with no warranties, and confers no rights. ... icons that I frequent. ... the toast is wired into the mini-player skin's script. ... visualization window. ...
    (microsoft.public.windowsmedia.player)