Re: Run programs from limited accounts

From: Karl Levinson [x y], mvp (levinson_k@despammed.com)
Date: 04/06/03


From: "Karl Levinson [x y], mvp" <levinson_k@despammed.com>
Date: Sun, 6 Apr 2003 16:03:26 -0400


Possibly you have not made all the necessary permissions changes for all the
necessary files and registry settings. Try enabling auditing and/or using
the free tools filemon and regmon and possibly process explorer from
www.sysinternals.com to see who is being denied access to what. [Enabling
auditing is my recommendation to try first, e.g. enable file and registry
access failures for all users in Explorer and REGEDT32 respectively.]

http://securityadmin.info/faq.htm#auditing

You could also try using Runas, though this may be less secure as it may let
a clever person escalate their permissions to Administrator equivalent:

http://securityadmin.info/faq.htm#runas

"Mark Randles" <mark.nospam@randles.cx> wrote in message
news:038001c2fc22$9c0005d0$3501280a@phx.gbl...
> I have the same issue with games, all from Microsoft (!),
> that require administrator rights. I tried the fixes
> below, without success, including the regedit option.
> Surely games players do not have to be administrators?
> Has somebody fixed this issue some other way?
> Cheers,
>
> Mark (to e-mail, delete the obvious)
>
> >-----Original Message-----
> >If your game or application works with admin accounts,
> but not with
> >limited accounts, you can fix it to allow limited users
> to access the
> >program files folder with "change" capability rather
> than "read" which
> >is the default.
> >
> >C:\>cacls "Program Files\appfolder" /e /t /p users:c
> >
> >where "appfolder" is the folder where the application is
> installed.
> >
> >If you wish to undo these changes, then run
> >
> >C:\>cacls "Program Files\appfolder" /e /t /p users:r
> >
> >If you still have a problem with running the program or
> saving settings
> >on limited accounts, you may need to change permissions
> on the registry
> >keys. Run regedit.exe and go to
> HKLM\Software\vendor\app, where
> >"vendor\app" is the key that the software vendor used
> for your specific
> >program. Change the permissions on this key to allow
> Users full control.
> >
> >--
> >Kent W. England, Microsoft MVP for Windows
> >
> >
> >"Rojesu" <rjsubieta@hotmail.com> wrote in
> >message news:43bb01c2f3a7$7039a830$a001280a@phx.gbl...
> >
> >> My son's limited account can not run games I have
> >> installed for him from an administrator account.
> >>
> >> When he runs the program from his account (limited) it
> >> asks him to install the program again, but if I change
> >> his account to administrator he sees no problem (I
> have a
> >> shortcut of the program in shared-folder)
> >>
> >> I want to keep his account as limited any advice would
> be
> >> greatly appreciate it.
> >>
> >> Regards,
> >> Rojesu
> >
> >.
> >



Relevant Pages

  • Re: Limited user and power options
    ... Export a copy of your Registry settings (or at least the parts you are ... "You may need to adjust the permissions in the Registry for this to ... give Full Control to REGISTERED ...
    (microsoft.public.windowsxp.general)
  • Re: Preventing resolution changes
    ... Organizational Unit with a test Group Policy linked to it and experiment ... Another thing to try is to force Group Policy registry settings to be ... permissions to the registry keys involved to no allow users change ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Preventing resolution changes
    ... Organizational Unit with a test Group Policy linked to it and experiment ... Another thing to try is to force Group Policy registry settings to be ... permissions to the registry keys involved to no allow users change ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Active Directory domain policy not available - Windows cannot access the registry information (5
    ... shuffling the registry around as a result. ... >What share permissions did you change? ... >SYSVOL and NETLOGON shares aren't accessible. ... >the domain controller is changed but the DNS still points to the old IP ...
    (microsoft.public.backoffice.smallbiz2000)
  • Re: ISA 2004 - Disk activity after SP1 or 2 installation
    ... configurations into the registry. ... permissions to the key and the sub keys: ... This newsgroup only focuses on SBS technical issues. ... you may want to contact Microsoft CSS directly. ...
    (microsoft.public.windows.server.sbs)