Re: Enabling execution of programs from limited accounts

From: Kent W. England [MVP] (kwe@mvps.org)
Date: 08/17/02 

From: "Kent W. England [MVP]" <kwe@mvps.org>
Date: Sat, 17 Aug 2002 09:37:28 -0700

[cacls.exe and regedit.exe are powerful programs that are best used by
experienced XP administrators. If you are uncomfortable with these
programs, or experiment too freely with these directions, you may cause
your system grievous harm. -kwe]

If your game or application falls into the category where it works with
admin accounts, but not with limited accounts, you can fix it to allow
limited users to access the program files folder with "change"
capability rather than "read" which is the default.

C:\>cacls "Program Files\appfolder" /e /t /p users:c

where "appfolder" is the folder where the application is installed.

If you wish to undo these changes, then run

C:\>cacls "Program Files\appfolder" /e /t /p users:r

If you still have a problem with running the program or saving settings
on limited accounts, you may need to change permissions on the registry
keys. Run regedit.exe and go to HKLM\Software\vendor\app, where
"vendor\app" is the key that the software vendor used for your specific
program. Change the permissions on this key to allow Users full control. 

--
Kent W. England, MS MVP for Windows XP
(Please respond only in the newsgroup)
Joe Kincaid <ckincaid1@kc.rr.com> wrote:
> I'm running XP Home at home and my kids have their own account which
> is limited. Some programs require that I install them as the
> administrator, but then the kids can't run them. They have a program
> icon, but when they try to execute it, the program starts up and
> immediately stops after a couple of quick screen updates. Nothing
> more. I can run the program myself from my administrator account. I
> can run the program in their account if I use "Run as.." and enter my
> password, but I don't want to be bothered with entering my password
> every time the kids use the computer.
>
> I've dug into the Help and Support screens and the only way I can
> find to get around this is to install the executable into the Shared
> Folder area instead of the Program Files area. Naturally this
> requires manually copying the files after the installation and now I
> have two copies of the program installed.
>
> I'd like to clean all this up. It seems to me there should be an
> easier way to set the executable so that anyone can run it.
>
> Any ideas?
>
> Thanks for your help.
>
> Joe Kincaid
> joekncd@netscape.net

Relevant Pages

  • Re: installing games so other users can access and save their game
    ... YES BUT I BOOTED IN TO SAFE MODE AND SIGNED ON AS ADMINISTRATOR AND RESET ... ALL ACCOUNTS TO FULL RIGHTS ADMINISTRATOR AND THEN INSTALL WORKED FINE (IT ... ALL THE ACCOUNTS GET THE ERROR AGAIN THIS ERROR DOESN'T HAPPEN WITH ALL ... ALL ACCOUNTS ARE SUPPOSED TO HAVE PERMISSIONS OVER EVERYTHING ...
    (microsoft.public.games)
  • Re: limited account and installing software
    ... so now they can't install software, but they now can't play the game ... folder and Desktop folder shortcuts from the user profile from which the ... limited accounts, you can fix it to allow limited users to access the ...
    (microsoft.public.windowsxp.security_admin)
  • Post SP2 cant view folder permissions :(
    ... The home machine was clean install of XP Pro as my raid controller ... Two accounts, both with admin rights plus the 'Administrator' account. ... Reboot, folder permissions gone again. ...
    (microsoft.public.windowsxp.general)
  • Re: Setting up XP on a domain network - best practices question
    ... or created a new ID with admin privileges to install all the ... Then use XP with full admin rights on the box. ... as the local administrator. ... Do all updates, configuration, and program installations from one of these two local accounts. ...
    (microsoft.public.windowsxp.general)
  • Re: Users cant access program
    ... decide if users or only the administrator can use the program. ... sections of the Windows registry or protected Windows system folders. ... limited accounts, you can fix it to allow limited users to access the ...
    (microsoft.public.windowsxp.help_and_support)