RE: Win XP non-Admin problems

From: joedreadlock (joedreadlock_at_discussions.microsoft.com)
Date: 09/26/04


Date: Sun, 26 Sep 2004 08:13:02 -0700

Leave the user's restricted.
Log on as administrator.
Modify NTFS rights on Palm software directories (i.e. C:\program
files\palm...)
Give "Users" modify rights.
You may also need to modify Palm registry keys.
start-run-regedit
HKLM-Software-Palm
Right-click - Permissions - Give user's full control

Good Luck

"Jay" wrote:

> We installed SP2 on our Win XP Pro PCs and have several
> applications that don't work unless you assign the user
> security as Computer Administrator. We want to deny the
> users the ability to install programs themselves, but want
> them to have full access rights to all files on their
> local hard drive. Specifically, the Palm Desktop software
> doesn't work if the user is not Admin level. Another
> application won't let us open several look-up windows
> simultaneously if user is not Admin level (we get an error
> saying Temporary Files cannot be Created). If we exit all
> applications, each look-up window can be opened fine, just
> not at the same time.
> Is there a way to create a user type that can't install,
> but has full access to all local files? Maybe TweakUI?
> Thanks for your help in advance. - Jay
>



Relevant Pages

  • Re: User rights.
    ... > all permissions and rights granted to any and all groups ... >From this I think I can infer that I am a member of both the administrator ... group as well as the user group and as such denying delete rights to the ... Keep in mind that modify includes delete. ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Modify default replication wait period in ADAM
    ... This posting is provided "AS IS" with no warranties, and confers no rights ... > Use of included script samples are subject to the terms specified at ... >> I am trying to find out how to modify the default amount of time an ADAM ... > instance waits to push a directory change to a member of a replica set. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Delegate certain rights to a single Domain Controller
    ... Please note that this hack does not eliminate all possible security risks, ... > This posting is provided "as is" with no warranties and confers no rights ... >> If you think your domain admins can only modify stuff in their own ... >>> cannot modify DCs across domains. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Storing Photos in Active Directory - jpegPhoto attribute - User class
    ... However, one thing to consider is that by default, users have rights to ... rights to modify this attribute directly. ... >> one of the MS newsgroups that you could find with a Google search pretty ... >> Joe K. ...
    (microsoft.public.dotnet.framework)
  • Re: Storing Photos in Active Directory - jpegPhoto attribute - User class
    ... However, one thing to consider is that by default, users have rights to ... rights to modify this attribute directly. ... >> one of the MS newsgroups that you could find with a Google search pretty ... >> Joe K. ...
    (microsoft.public.dotnet.languages.vb)