Re: Problems with some programs now I've adopted a non-administrative account

From: Bill Sanderson (Bill_Sanderson_at_msn.com.plugh.org)
Date: 02/01/04 

Date: Sat, 31 Jan 2004 23:02:50 -0500

This is a goal well worth pursuing. I've one small office with brand new XP
machines and a Windows 2000 server running in this mode now. It has worked
well for them so far--it drives me nuts when I want to look at network
connection properties, however, I haven't found a way to get RunAs to let me
look at those properly. Otherwise--software installs, etc--it works
well--users are prompted when more permissions are needed for an install.

There are definitely individual software apps which are resistant to this
treatment. I'm surprised to hear that PhotoDraw is among them--but I
haven't tried it out myself.

"Philip Herlihy" <foof8501@herlihy.eu.veil.com> wrote in message
news:%23Vb5OMD6DHA.1632@TK2MSFTNGP12.phx.gbl...
> Thanks - that's good advice. I used regmon for the first time recently
> and
> was amazed how useful it was, and how easy to use (with a few minutes'
> experimentation). I haven't used filemon yet, but I'm surprised at myself
> that I didn't think of it.
>
> I do want to continue as a limited user for routine tasks, if only so that
> I
> can understand the issues involved. I earn my living advising small
> businesses, and despite over 20 years in the industry there are plenty of
> things I still need to figure out. This is one of them...
>
> --
> ####################
> ## PH, London
> ####################
> "Steven L Umbach" <sumbach@nospam-ameritech.net> wrote in message
> news:sSQSb.6583$BA2.3151@newssvr26.news.prodigy.com...
>> If you are a home user go ahead and use your administrator account. I
> always
>> do [on several computers] and never have a problem, BUT I use a complex
>> password for my account, have a properly configured firewall, keep my
>> patches currernt, use an antivirus proram that scans all emails and
> updates
>> itself automatically, have hardened my Internet Explorer settings to be
> at
>> least what is described in the link below, and don't install junk
>> software
>> from file swapping sites. However you are correct that in a domain
>> multicomputer environment where even all the users on the lan may not be
>> trusted, you need to use the administrator account sparingly and protect
> it
>> well.
>>
>> http://www.mvps.org/winhelp2002/unwanted.htm
>>
>> If you want to continue what you are doing. It may be possible to modify
>> ntfs and registry permissions for an application so that it can run as a
>> regular user. Contacting the software publisher or viewing FAQ at their
>> website may help. Or you can try to track down needed permissions
>> yourself
>> by using the regmon and filemon tools from Sysinternals, invoking them
> with
>> runas and administraor credentials while logged on as a regular user just
>> before you try to run the application looking in the logile generated to
> see
>> where access is denied and repeating the process with both utilities as
> many
>> times as necessary. --- Steve
>>
>> http://www.sysinternals.com/
>>
>>
>> "Philip Herlihy" <foof8501@herlihy.eu.veil.com> wrote in message
>> news:OHAN8H$5DHA.2628@TK2MSFTNGP10.phx.gbl...
>> > I've taken the occasion of a complete reinstall to change from my old
>> habit
>> > of using an administrator-level account for routine use. I've figured
> out
>> > most of the problems, but one or two programs are intractable. MS
>> > PhotoDraw, for example, will only run with administrative privilege
> (tried
>> > everything else) so I've set up a shortcut which prompts me to log on
> with
>> a
>> > higher-level account. The PDF995 pseudo printer-driver (bargain - see
>> > www.pdf995.com) won't run now unless I'm logged on with full admin
>> > credentials.
>> >
>> > I wonder what guidelines there might be from folk who've tackled this
>> > before? Obviously I can change account and grant my limited account
> Full
>> > Control to selected files and folders, but this is surely negating the
>> > protection of using a limited account. Any tips, or pointers to
> articles?
>> >
>> > --
>> > ####################
>> > ## PH, London
>> > ####################
>> >
>> >
>> >
>>
>>
>
>

Relevant Pages

  • Re: deny domain users access to windows installer
    ... they are a regular user is a good start. ... loosens ntfs permissions quite a bit. ... computer and user configuration for Windows Installer settings and be sure the ... "always install with elevated privileges" is disabled. ...
    (microsoft.public.win2000.security)
  • Re: How to allow standard user to install an application
    ... Depending on the application you may be able to tweak folder and registry ... permissions to allow a regular user to install it. ...
    (microsoft.public.windows.server.security)
  • Re: MS Office Prof Plus 2007
    ... Are you sure your account is an administrator account on the computer? ... C> through school said I could install on 2 computers. ... C> permission so per support doc I changed permissions. ...
    (microsoft.public.office.setup)
  • How to "make install" while not a root?
    ... I do not have root permissions or even write permissions on some paths ... as a regular user. ... I'm trying to install a package in my home ...
    (comp.lang.tcl)
  • User Accounts Problems
    ... Running Windows Vista 64 with no hardware or software issues, Administrator account and user account. ... When I try to install it says the update can only be installed by the Administrator and gives me the option of selecting the Administrator account for the install. ... I've set all the permissions to allow the program to be fully accessible to all users while here and it shows the permissions being set. ...
    (microsoft.public.windows.vista.general)