Re: Writing to activx and system files on a domain
From: Roger Abell [MVP] (mvpNOSPAM@asu.edu)
Date: 03/15/03
- Next message: Roger Abell [MVP]: "Re: user rights"
- Previous message: Roger Abell [MVP]: "Re: Password for spcific folder"
- In reply to: Steve rollins: "Writing to activx and system files on a domain"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
From: "Roger Abell [MVP]" <mvpNOSPAM@asu.edu> Date: Sat, 15 Mar 2003 09:11:55 -0700
Step 1 is to complain to the vendor,
and for 2 reasons.
1. it is not Windows logo compliant
2. an activeX control should not be self modifying
if it really is doing what you have indicated
See if the vendor will tell you how to control where
this deposits itself, and then provide a grant of change
to Users on the area you have defined just for it.
Failing those, consider whether you want the headache
as this will plague you in all future version of the OS.
If you have not alternatives, then
1. see if the app is creating and deleting as if not, and
it is only changing things once there you may be
able to grant Users modify on just those items once
they are there (this is not likely, but maybe)
2. consider granting Users the ability to define new
in that directory and couple this with a grant of
modify to Creator Owner. You can use as a model
how this is done at the root of the boot partition.
However, if the machine is used by multiple accounts,
then you will need to add cleanup code into a logoff
script as the next user will not have the needed permissions.
-- Roger "Steve rollins" <Sgrollins@houlihanlawrence.com> wrote in message news:022d01c2ea68$276abc40$a101280a@phx.gbl... > We use a third party software that is net based and have > a problem using some of the features. We noticed that it > drops an active x file into the system folder and reads > and writes to this file. But any user on the domain does > not have rights to write to system files with a w2k > domain using xp clients. > Without making all users domain admins, how can we > achieve this. > Thanks > Steve
- Next message: Roger Abell [MVP]: "Re: user rights"
- Previous message: Roger Abell [MVP]: "Re: Password for spcific folder"
- In reply to: Steve rollins: "Writing to activx and system files on a domain"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
