Re: Default User Serurity Permission

From: Roger Abell [MVP] (mvpNoSpam_at_asu.edu)
Date: 06/07/03


Date: Sat, 7 Jun 2003 11:05:25 -0700


IT sounds as if you only need to get NTFS permissions
back to a known config state. This should help in Pro
Restore XP to installation Security Defaults
   for Pro see: http://support.microsoft.com/?id=313222
If you renamed/deleted things within the profiles this is
not going to adjust for that.
On the running of apps that are illbehaved, this may help
Run programs as Limited/Restricted accounts

This is commonly seen from applications that fail to meet the Windows
Certification requirements.
Some apps make use of calls that are no longer supported, and for
these use of the application compatibility tool may help.
Beyond that, the first thing to try is to grant the Users group modify on
the area where the application has installed, usually a folder within
Program Files.
If this is insufficient, then very often one or both of the next increased
grants to Users group helps
1. some folder outside of the app install point where
    attempts are made to create temp files or specific
    files such as the app's self-installed ini file in the
    Windows dir structure
2. the registry keys of the application
The regmon and filemon tools from www.sysinternals.com can help one
determine what accesses are being attempted but are denied to Users only
accounts.

"Bill" <private_1000@hotmail.com> wrote in message
news:096201c32cdc$745635a0$a101280a@phx.gbl...
> Hi,
>
> Can someone help me restore the default users' security
> permission profile in a workgroup environment using NTFS
> in Windows XP Pro version 2002 Service Pack 1? In fact,
> maybe I should restore all the defaults for Guest, User,
> and Admin
>
> I tried to get a legacy program (Readers Rabbit's Math
> Ages 4-6), which worked fine when logged on as an
> administrator, to work in my kids profiles (users'
> [limited]) and also the guest profile in Windows XP Pro.
> So I right clicked the C drive, chose properties, and
> then chose the security tab and made some adjustments to
> the user profile. These adjustments got the legacy
> program working. However, now one user can read and write
> to all other users accounts-including the administrators
> account. In fact, all users have read/write access to the
> entire C:\ drive. This is not what I intended, I only
> want to allow my children to run their programs and have
> access to their documents. I would have used the restore
> function, but I had disabled it-I have re-enabled it for
> future occurrences like these.
>
> The most important thing for me at this point is to reset
> the default security profiles. However, advice on getting
> this legacy program working while maintaining control
> would also be greatly appreciated. I've tried the
> compatibility wizard included with XP Pro, but it did not
> work. This application might be writing to the temp file
> so maybe if I gave write permission to the temp file it
> might work. But which temp file, there are several.
> Anyway,
>
> I'm starting to ramble. If anyone can help it would be
> greatly appreciated. THANK YOU!
>



Relevant Pages

  • Re: Default User Serurity Permission
    ... and then the [File Security] section. ... and once a new MMC console opens, ... > profiles, I just changed them. ... >>Restore XP to installation Security Defaults ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Default User Serurity Permission
    ... installation default security settings: ... profiles, I just changed them. ... >Restore XP to installation Security Defaults ...
    (microsoft.public.windowsxp.security_admin)
  • Re: KB943460 / Software Distribution Service 3.0 System Restore Pr
    ... I'm not either but it's certainly a distinct possibility, especially since you're relying on McAfee Security Center. ... If you'd installed SP3 and then Windows Update offered the machine KB943460, something's VERY wrong with your computer! ... Once Windows Update runs it sets up system restore point under the heading ... KB943460 specifically I just install all the updates. ...
    (microsoft.public.windowsxp.general)
  • Re: What price SP2 - to Jupiter
    ... > not for those who want to find fault or it is their livelyhood to find ... > security programs, such AVPs, Firewalls, Spyware detection and the like. ... > Registry and an Image of my drives it is simplicity to make a restore ... I see in these news groups many claims of bugs, ...
    (microsoft.public.windowsupdate)
  • Re: I think it might be time ...
    ... noise level when it comes to disk space. ... > "...those 'restore' files.", how do you expect to be able to restore to ... >> If you are running Windows 98, ... If you are running XP Pro, you have security by default. ...
    (sci.med.transcription)