Re: Run programs from limited accounts
From: Karl Levinson [x y], mvp (levinson_k@despammed.com)
Date: 04/06/03
- Next message: Karl Levinson [x y], mvp: "Re: Lost Administrator Password"
- Previous message: Karl Levinson [x y], mvp: "Re: how to addd internet information services"
- In reply to: Mark Randles: "Re: Run programs from limited accounts"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
From: "Karl Levinson [x y], mvp" <levinson_k@despammed.com> Date: Sun, 6 Apr 2003 16:03:26 -0400
Possibly you have not made all the necessary permissions changes for all the
necessary files and registry settings. Try enabling auditing and/or using
the free tools filemon and regmon and possibly process explorer from
www.sysinternals.com to see who is being denied access to what. [Enabling
auditing is my recommendation to try first, e.g. enable file and registry
access failures for all users in Explorer and REGEDT32 respectively.]
http://securityadmin.info/faq.htm#auditing
You could also try using Runas, though this may be less secure as it may let
a clever person escalate their permissions to Administrator equivalent:
http://securityadmin.info/faq.htm#runas
"Mark Randles" <mark.nospam@randles.cx> wrote in message
news:038001c2fc22$9c0005d0$3501280a@phx.gbl...
> I have the same issue with games, all from Microsoft (!),
> that require administrator rights. I tried the fixes
> below, without success, including the regedit option.
> Surely games players do not have to be administrators?
> Has somebody fixed this issue some other way?
> Cheers,
>
> Mark (to e-mail, delete the obvious)
>
> >-----Original Message-----
> >If your game or application works with admin accounts,
> but not with
> >limited accounts, you can fix it to allow limited users
> to access the
> >program files folder with "change" capability rather
> than "read" which
> >is the default.
> >
> >C:\>cacls "Program Files\appfolder" /e /t /p users:c
> >
> >where "appfolder" is the folder where the application is
> installed.
> >
> >If you wish to undo these changes, then run
> >
> >C:\>cacls "Program Files\appfolder" /e /t /p users:r
> >
> >If you still have a problem with running the program or
> saving settings
> >on limited accounts, you may need to change permissions
> on the registry
> >keys. Run regedit.exe and go to
> HKLM\Software\vendor\app, where
> >"vendor\app" is the key that the software vendor used
> for your specific
> >program. Change the permissions on this key to allow
> Users full control.
> >
> >--
> >Kent W. England, Microsoft MVP for Windows
> >
> >
> >"Rojesu" <rjsubieta@hotmail.com> wrote in
> >message news:43bb01c2f3a7$7039a830$a001280a@phx.gbl...
> >
> >> My son's limited account can not run games I have
> >> installed for him from an administrator account.
> >>
> >> When he runs the program from his account (limited) it
> >> asks him to install the program again, but if I change
> >> his account to administrator he sees no problem (I
> have a
> >> shortcut of the program in shared-folder)
> >>
> >> I want to keep his account as limited any advice would
> be
> >> greatly appreciate it.
> >>
> >> Regards,
> >> Rojesu
> >
> >.
> >
- Next message: Karl Levinson [x y], mvp: "Re: Lost Administrator Password"
- Previous message: Karl Levinson [x y], mvp: "Re: how to addd internet information services"
- In reply to: Mark Randles: "Re: Run programs from limited accounts"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|