Re: SORRY... But I seem to be an IDIOT

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance

From: Bruce Chambers (bruce_a_chambers_at_h0tmail.com)
Date: 12/07/04


Date: Mon, 06 Dec 2004 19:59:01 -0700

sharkhax wrote:
> I'm still fiddling with new User accounts and all that. I intend to create
> one admin and the rest will be limited accounts. But what I want to do is
> download programs like .... trillian or Shareaza on the admin account and
> then have those programs, once installed also apply to the limited accounts.
> I just don't see how to do that.
>
> Also trying to download and install these things on limited accounts doesnt
> work.
>
>
> thanks in advance for the help / critisizm / riddiculing / hacking / etc....

    This is quite common if the software was designed for Win9x/Me, or
if it was purportedly intended for WinNT/2K/XP, but was very poorly
coded. Quite simply, the installation routine for this application
doesn't "know" how to handle individual user profiles, or the
application tries to make changes to "off-limits" sections of the
registry. Quite often, you can make this software available to other
users by _copying_ the Start Menu folder and Desktop folder shortcuts
from the user profile from which the software was installed in the
corresponding folders in the user profile(s) in which you'd like the
software to be accessible. If the application is something that
can/should be made available to all current and future users, copying
the shortcuts into the corresponding locations of the All Users profile
will do the trick.

     For some obscure reason, game developers in particular seem to not
understand WinXP's file security paradigm, and require even limited
users to have unnecessarily high privileges to protected systems
folders. For example, saved games are often stored in a sub-folder
under the game's folder within C:\Program Files - a place where no
inexperienced or limited user should have write permissions.

     NOTE: This may not work if the software requires access to parts
of the hard drive and/or registry that are not normally accessible to
regular users. (This won't occur if the application was properly
written.) If this does prove to be the case, however, you're left
with two options: Either grant the necessary users appropriate higher
access privileges (either as Power Users or local administrators), or
replace the application with one that was properly designed
specifically for WinNT/2K/XP.

Some Programs Do Not Work If You Log On from Limited Account
http://support.microsoft.com/default.aspx?scid=kb;EN-US;q307091

     Additionally, here are a couple of tips suggested, in a reply to a
different post, by MS-MVP Kent W. England:

"If your game or application works with admin accounts, but not with
limited accounts, you can fix it to allow limited users to access the
program files folder with "change" capability rather than "read" which
is the default.

C:\>cacls "Program Files\appfolder" /e /t /p users:c

where "appfolder" is the folder where the application is installed.

If you wish to undo these changes, then run

C:\>cacls "Program Files\appfolder" /e /t /p users:r

If you still have a problem with running the program or saving
settings on limited accounts, you may need to change permissions on
the registry keys. Run regedit.exe and go to HKLM\Software\vendor\app,
where "vendor\app" is the key that the software vendor used for your
specific program. Change the permissions on this key to allow Users
full control."

     Ultimately, though, you may need to go back to the applications'
vendor and ask for a patch to make the program compatible with a more
secure OS. If the vendor refuses, take your business elsewhere.

-- 
Bruce Chambers
Help us help you:
http://dts-l.org/goodpost.htm
http://www.catb.org/~esr/faqs/smart-questions.html
You can have peace. Or you can have freedom. Don't ever count on having 
both at once. - RAH


Relevant Pages

  • Re: Program requires admin rights
    ... > We have a program that requires admin rights to run correctly. ... The vendor is ... Start Menu folder and Desktop folder shortcuts from the user profile ... limited accounts, you can fix it to allow limited users to access the ...
    (microsoft.public.windowsxp.general)
  • Re: limited account and installing software
    ... so now they can't install software, but they now can't play the game ... folder and Desktop folder shortcuts from the user profile from which the ... limited accounts, you can fix it to allow limited users to access the ...
    (microsoft.public.windowsxp.security_admin)
  • Re: User running just one program as Admin? Can it be done?
    ... David wrote: ... > One game requires him to be Admin to run. ... Start Menu folder and Desktop folder shortcuts from the user profile ... limited accounts, you can fix it to allow limited users to access the ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Program installation on Multi User Setups
    ... Is there anyway that when I install a new program, it will install for all users? ... Quite simply, the application doesn't "know" how to handle individual user profiles with differing security permissions levels, or the application is designed to make to make changes to "off-limits" sections of the Windows registry or protected Windows system folders. ... saved data are often stored in a sub-folder under the application's folder within C:\Program Files - a place where no inexperienced or limited user should ever have write permissions. ... limited accounts, you can fix it to allow limited users to access the ...
    (microsoft.public.windowsxp.newusers)
  • Re: Does ANYONE know the answer to this Admin question?
    ... on limited accounts, you may need to change permissions on the registry ... > profile that they limited to just "user" level with no ... > I have MY profile set with admin rights to install ...
    (microsoft.public.windowsxp.security_admin)