Re: Non-Administrator's access to local CD-ROM?

From: Roger Abell (mvpNOSpam_at_asu.edu)
Date: 06/15/05 

Date: Wed, 15 Jun 2005 02:06:54 -0700

Oops, I now very much notice you stated W2k.

I was referring to the AppCompat tab in XP
http://www.microsoft.com/technet/prodtechnol/winxppro/maintain/lgcyapps.mspx

With the app running as admin, in W2k but not as non-admin, I am
wondering how much tweaking of permissions the filesystem and
Com components have had to them. It would probably be worth
a test with the regmon and filemon tools from sysinternals.com
(log in as a plain user, RunAs the tools with an admin account and
preconfigure them to trap filtered by the plain user account, start
the captures and launch the app as the plain user and stop the capture
once the app has failed).

The most recent version of the App Compat Toolset is available at
http://www.microsoft.com/technet/prodtechnol/windows/appcompatibility/default.mspx 

-- 
Roger Abell
Microsoft MVP (Windows  Security)
"ADJ" <andrewjensAThotmailDOTcom> wrote in message
news:42afdb43@quokka.wn.com.au...
> Thanks for the response.
> Yes - the apps are the latest downloads and patches. Your reference to
> depreciated calls rings true - it would explain things (although a little
> surprising from Apple's iTunes).
> How do I go about running an app with Win9x compatibility?
> Once again, thanks in advance
>
>
> "Roger Abell" <mvpNOSpam@asu.edu> wrote in message
> news:u6VxIOPcFHA.2180@TK2MSFTNGP12.phx.gbl...
> > It is not by OS design.  Have you checked at the vendors' sites for
> > updates to their software?  I am unfamiliar (as a user) with the apps
> > you have mentioned by name, so that was a generic recommendation
> > rather than from knowing there are updates for those apps.  Rather
> > I am basing it on experience with Nero which for the longest time
> > showed the same behavior, with an app internal check, until they
> > modified their code.
> > Now, with that said, it is possible that the app is making older
> > depricated calls, in which case trying to run the app with the
> > application compatibility set to Win9x might help.
> >
> > -- 
> > Roger Abell
> > Microsoft MVP (Windows  Security)
> >
>
>

Relevant Pages

  • Re: Non-Administrators access to local CD-ROM?
    ... > preconfigure them to trap filtered by the plain user account, ... > the captures and launch the app as the plain user and stop the capture ... > The most recent version of the App Compat Toolset is available at ...
    (microsoft.public.win2000.security)
  • Re: XP & W2K server User rights need help
    ... before did not install the apps as admin. ... >behaved app. ... >> server non of the users had accounts only the computers ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Administrator Logon to 1 DC only
    ... Okay, no, I am past the limiting admin privileges.... ... Over the weekend I am going to create another DC on VMware Server and then ... app on the DC i.e. making them members of the Builtin administrators group. ... leaving 3rd party app on its own or vice versa. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Manifests and requestedExecutionLevel
    ... The existing app is a single executable, ... Since you already have the small .exe running, ... And Admin user priviledge is High MIC. ... The manifest has the capability of telling Vista that it needs to be started ...
    (microsoft.public.vc.mfc)
  • Re: BYPASS privilege !!
    ... demarkation between OS Admins and App Admins, ... less simple to stop a Sys Admin from messing with the App (again, ... under/over/around/through the same security. ... Equally obvious, to a user with BYPASS privilege, it matters not how ...
    (comp.os.vms)