Re: running apps as power user. Permission problems.
From: drunkardswalk@earthlink.net
Date: 03/01/03
- Next message: drunkardswalk@earthlink.net: "Re: Windows XP VS. Windows 2000 security on C:\"
- Previous message: drunkardswalk@earthlink.net: "Re: Rundll32"
- In reply to: Tim Allen: "running apps as power user. Permission problems."
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
From: drunkardswalk@earthlink.net Date: Sat, 01 Mar 2003 03:13:32 -0700
On Fri, 28 Feb 2003 01:27:12 -0800, "Tim Allen" <Tim.allen@torex.com>
wrote:
>Hi there, I have a problem I have been trying to rectify
>for a week now and I'm really at my wits end!!
>We have some in house software which we have installed on
>clients machines as local administrator. The client then
>runs the app as a power user logged onto their network.
>the problem is, certain parts of the app do not run
>correctly under this setting. The user has to be a local
>administrator for it to work correctly.....which the
>client does not want to be.
>I think it may be that the installation is writing to the
>registry where only admin can access. I have granted full
>access to the dll's and ocx's of the program etc to see if
>that works. No joy.
>I have tried the "runas" option which works but prompts
>for the administrator password
>I have granted them admin rights and installed the app
>under their profile. Then reduced their rights to power
>user, that did not work. Not too sure what I can do next
>Does anybody have any ideas.
>Much appreciated.
>Tim Allen
I think you've figured it out correctly. The app wants too many
rights. Unfortunately, there's not really a fix short of rewriting
the program to run with "minimum privilege," as the saying is. All
software should be written that way, anyway, but from the developer's
standpoint it's lots easier to just let everything run with default
permissions (namely, wide open). It's *work* to check all the
permissions on all file, process, pipe, and registry accesses in a
program. I don't suppose it would surprise you to discover that most
developers run their own machines as supervisor. Personally, I'm
horrified at running untested code on a machine I have full access to,
but then, I always spend lots of time tweaking my machine. Other
programmers seem to do a basic installation, ghost it, and just scrub
and recopy when the inevitable corruptions crop up.
As I suggested in another post, you can download MS's Compatibility
Toolkit; it'll at least give you some idea of what rights the program
needs to run.
Reid
- Next message: drunkardswalk@earthlink.net: "Re: Windows XP VS. Windows 2000 security on C:\"
- Previous message: drunkardswalk@earthlink.net: "Re: Rundll32"
- In reply to: Tim Allen: "running apps as power user. Permission problems."
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
