Re: Software Restrictions

The software does not have to be installed in the Program Files folder but
the users need the proper permissions to the folder, any other folders, and
possibly the registry to run the application. By default user should already
have read/list/execute permissions to a folder created off of the drive
folder but you should double check that.

Try temporarily add a user to the power users group to see if that allows
the user access to the application. If it does you should be able to tweak
permissions to allow regular users to use the application. There is a
security template called compatwks.inf that will modify permission of a
computer to give regular users the same permissions as power users without
the extra privileges such as creating shares and user accounts.

It is not always possible with older applications to get them to function
for a regular user. There are free tools from SysInternals called filemon
and regmon that can also help you troubleshoot problems with running
applications. Basically you logon to a computer as a regular user, and then
use "runas" to start filemon or regmon with administrator credentials just
before you try to run the application and then stop filemon/regmon from
logging as soon as the application fails. Then look in the log of
filemon/regmon for access denied entries, make changes in permissions for
the pertinent users group, and try again in a trial and error process.

http://www.sysinternals.com/Utilities/Filemon.html -- filemon

If you are forced to allow user to be local administrators because of issues
with old application you still can use Software Restriction Policies to
restrict what applications a user can run or install by configuring
enforcement to include local administrators. The catch is that a local
administrator can bypass SRP by booting into safe mode assuming they know
such. --- Steve


"UC_Bearcat_99" <UCBearcat99@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:E9F41E26-3660-432D-AD79-1E0C4FB6238E@xxxxxxxxxxxxxxxx
> Thank you Steve. I knew I was at the cross-roads of "admin'ing" people or
> telling them that they just have to ask. And like you said, giving them
> any
> more destructive rights is not going to do anybody any good.
>
> One follow up question as this has me a little confused but maybe could be
> solved with Software Restrictions. The users have software that was made
> for
> Windows 95/98 (I know - don't ask). When I, as logged in as admin,
> install
> the software on their machines, it runs perfectly fine under my account.
> However, when the user logs in, the software bounces back errors and
> generally won't even start.
>
> Looking into this (haven't test it), the software installs itself to its'
> particular folder on the root c:\ (not in program files). Example is
> Print
> Artist 5.0 will install to the C:\Print Arist 5\ folder.
>
> Does software need to be installed the 'Program Files' folder in order to
> get all the proper permissions to run under 'user' accounts?
>
> Thank you,
> Jim


.

Relevant Pages

  • Re: New install of XP
    ... you can set XP Home permissions in Safe Mode. ... Open Explorer, go to Tools and Folder Options, on the view tab, scroll to ... >>Was this a clean install or did you install over a> previous setup? ...
    (microsoft.public.windowsxp.basics)
  • Re: cant publish, author permissions issue
    ... copied them to disk and stuck them into a frontpage folder on the newer ... machine-- that folder, i believe, was part of ms office but was empty because ... and so had to wait until another disk was purchased before i could install on ... The Permissions will normally be grayed out on your local machine as they can not be published ...
    (microsoft.public.frontpage.extensions.windowsnt)
  • Re: Ids in Administrator Group
    ... the Permissions should now be OK. ... I noticed during the install process when the program asked to select ... "torbar" wrote: ... This is the default folder where all programs are installed. ...
    (microsoft.public.windowsxp.help_and_support)
  • Re: cant publish, author permissions issue
    ... copied them to disk and stuck them into a frontpage folder on the newer ... machine-- that folder, i believe, was part of ms office but was empty because ... and so had to wait until another disk was purchased before i could install on ... The Permissions will normally be grayed out on your local machine as they can not be published ...
    (microsoft.public.frontpage.extensions.windowsnt)
  • Re: 2000 Pro - Updates Download but wont install
    ... > Thanks for your help Robert - If I install FileMon - What exactly should I be ... the file is still downloaded but again just wont install. ... >> As others were trying to show you your problem has to do with permissions. ... FileMon would show you which account was involved, ...
    (microsoft.public.windowsupdate)