Re: How to track dpwn programs that fail in Restricted User Accoun
From: Roger Abell (mvpNOSpam_at_asu.edu)
Date: 07/06/05
- Next message: Roger Abell: "Re: Logon/Logoff Failure Audit - Event 537 in Windows Server 2003"
- Previous message: Roger Abell: "Re: How to set up a folder so that only the creator of a file can modify it?"
- In reply to: Adam White: "Re: How to track dpwn programs that fail in Restricted User Accoun"
- Next in thread: John7: "Re: How to track down programs that fail in Restricted User Accounts"
- Reply: John7: "Re: How to track down programs that fail in Restricted User Accounts"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: Tue, 5 Jul 2005 23:39:47 -0700
"Adam White" <AdamWhite@discussions.microsoft.com> wrote in message
news:5D4518CC-82DA-469A-9937-B297461E2679@microsoft.com...
> And some times registry locations such as CLSID, if the program registers
> DLLs on the fly
>
> - Adam
>
Yes, but that is one grant I would not like to give to Users.
I have no real issue with granting Users write over the reg
key structure of a specific application in HKLM\Software
when that is needed by a misbehaved app.
-- Roger Abell Microsoft MVP (Windows Security) > "Roger Abell" wrote: > > > Like Nutcase says, very often it is just need for modify grant to Users > > group on the c:\program files\application-install-point folder > > so it is worth a try before digging in more deeply with the tools from > > sysinternals. However, if you are dealing with an old application, > > Win9x era or worse, this may well not be sufficient and for some > > it may be impossible to make the prog work in limited account. > > > > -- > > Roger Abell > > Microsoft MVP (Windows Security) > > > > "John7" <NoSp@mm.com> wrote in message > > news:daar1m$5sj$1@news1.zwoll1.ov.home.nl... > > > Hi, > > > > > > Are there any tools or sources that help to track down why certain > > programs > > > fail to work (properly) in Restricted User Accounts. > > > > > > I do not intend to grant every user Administrative rights. > > > > > > TIA, > > > John7 > > > > > > > > > > > >
- Next message: Roger Abell: "Re: Logon/Logoff Failure Audit - Event 537 in Windows Server 2003"
- Previous message: Roger Abell: "Re: How to set up a folder so that only the creator of a file can modify it?"
- In reply to: Adam White: "Re: How to track dpwn programs that fail in Restricted User Accoun"
- Next in thread: John7: "Re: How to track down programs that fail in Restricted User Accounts"
- Reply: John7: "Re: How to track down programs that fail in Restricted User Accounts"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]