Re: Limited accounts won't do the job

From: Jeff Hunter (jahunt0125@hotmail.com)
Date: 01/08/03 

From: "Jeff Hunter" <jahunt0125@hotmail.com>
Date: Wed, 8 Jan 2003 02:01:45 -0600

This works great. I have not had anymore problems since learning this.
Thanks for the great job!!
Jeff
"Kent W. England [MVP]" <kwe@mvps.org> wrote in message
news:u0TkBlVrCHA.2528@TK2MSFTNGP09...
> If your game or application falls into the category where it works with
> admin accounts, but not with limited accounts, you can fix it to allow
> limited users to access the program files folder with "change"
> capability rather than "read" which is the default.
>
> C:\>cacls "Program Files\appfolder" /e /t /p users:c
>
> where "appfolder" is the folder where the application is installed.
>
> If you wish to undo these changes, then run
>
> C:\>cacls "Program Files\appfolder" /e /t /p users:r
>
> If you still have a problem with running the program or saving settings
> on limited accounts, you may need to change permissions on the registry
> keys. Run regedit.exe and go to HKLM\Software\vendor\app, where
> "vendor\app" is the key that the software vendor used for your specific
> program. Change the permissions on this key to allow Users full control.
>
> --
> Kent W. England, MS MVP for Windows XP
> (Please respond only in the newsgroup)
>
>
> "Gene Hora" <ams34@san.rr.com> wrote in message
> news:hasO9.179848$%k2.47987170@twister.socal.rr.com...
> > I appreciate very much the time you took. Mr. Schmidt's suggestion
> > was
> > certainly worth a try; but didn't work -- same result.
> >
> > Kevin K's suggestion might have worked -- but using the script method
> > is
> > beyond my expertise and inserting the password without the script
> > defeats
> > the purpose; although probably none of our users would be able to
> > access it.
> >
> > "Kevin K" <WMTRP205@NoSpam.com> wrote in message
> > news:OJGA3tGrCHA.1776@TK2MSFTNGP10...
> > > Al,
> > >
> > > You do not have to give others your password if you use a script and
> > encrypt
> > > it. Visit:
> > >
> >
http://msruniv.corp.bcentral.com/Shared%20Documents/runas_admin_script.vbs.t
> > xt
> > >
> > > NOTE: The link may warp. If it does copy and paste it into your
> > > browser.
> > >
> > > Happy Holidays!
> > > --
> > > Kevin
> > > Please reply to newsgroup so that all may benefit
> > >
> > > "al schmidt" <bigaldepr@caribe.net> wrote in message
> > > news:007601c2ac47$3fbf1ca0$d5f82ecf@TK2MSFTNGXA12...
> > > Runas works but you still have to let other have the
> > > adminstrative password.
> > >
> > > In some cases the following has worked, especially for
> > > non-Microsoft programs, but not all. It is worth a try.
> > >
> > > First - Login as an adminstrator and remove the programs.
> > >
> > > Second - Make all users administrators.
> > >
> > > Third - Re-install the programs.
> > >
> > > Forth - Change the accounts back to limited accounts.
> > >
> > > No promises, I donīt have either of these programs.
> > >
> > >
> > > >-----Original Message-----
> > > >On a NTFS formatted drive, created 3 accounts (1 with
> > > Administrator rights),
> > > >2 limited. The intent was to allow the 2 limited
> > > accounts to have overall
> > > >access to files/folders, but not Administrator rights to
> > > change accounts or
> > > >passwords other than own.
> > > >
> > > >The problem is that in limited accounts users were
> > > unable to access 2
> > > >programs needed: WordPerfect 8 and Calendar Creator
> > > (ver. 8). Both programs
> > > >work OK inWinXP otherwise. The only solution I could
> > > find was to change
> > > >both limited accounts to allow administrator rights.
> > > Although we don't have
> > > >a large user base, it is still a little bit risky. Is
> > > there a way to give
> > > >the limited accounts access to those two programs? They
> > > seem to have access
> > > >to other programs, particularly in Office 97, as well as
> > > others installed
> > > >with no problem.
> > > >
> > > >
> > > >.
> > > >
> > >
> > >
> >
> >

Relevant Pages

  • Re: Last Logon Time Stamp
    ... > I am new to script. ... > I need to list out inactive accounts more than 90 days in both AD accounts ... Use ADO to retrieve lastLogonTimeStamp for all users. ... And here is a sample program that retrieves the distinguishedName for all ...
    (microsoft.public.windows.server.scripting)
  • Re: How to fool program into working for limited users in XP Pro
    ... After installing it and making sure the "modem-on-hold" feature worked right I then proceeded to test it in his children's limited user accounts to make sure they can get on the net also. ... Now, while his children were also able to log onto the net, the modem on hold program will only work for users logged on as administrators. ... This fact was verified by one of USR's support technicians who informed me that they had no immediate plans to change it so it would work in limited accounts. ... Quite simply, the application doesn't "know" how to handle individual user profiles with differing security permissions levels, or the application is designed to make to make changes to "off-limits" sections of the Windows registry or protected Windows system folders. ...
    (microsoft.public.windowsxp.general)
  • Re: Script to delete computer accounts not working
    ... thanks for the initial script as well. ... computer accounts that are disabled and haven't been modified for 30 days. ... Set objCommand = CreateObject ...
    (microsoft.public.scripting.vbscript)
  • Re: Running a script against an OU
    ... Do I need to place a forward slash between Computer and Accounts? ... run the script against an OU called lab1? ... the WinNT provider is blind to OU's, so you must use the LDAP provider to ... bind to the OU. ...
    (microsoft.public.scripting.vbscript)
  • Re: AD Attribute query!
    ... The scripting approach for modifying the CN attribute (using the MoveHere ... GAL will be surname, firstname as well.. ... However the script underneath it, only adjusts the display name, it does ... other accounts were created, it is rather difficult to speculate why ...
    (microsoft.public.windows.server.active_directory)
Loading