Re: Limit administrators permissions

From: Danny Sanders (Danny.Sanders_at_NO-SPAMcpcmed.org)
Date: 12/02/04 

Date: Thu, 2 Dec 2004 11:13:15 -0700

> One of the main applications that we have on the XP SP2
> image is Hummingbird DM 5 and it needs the user to be
> local admin, otherwise it does not install the Office
> 2003 integration bits.

I'm not the least bit familiar with Hummingbird 5, but from the above
statement I wonder if one could set the user up as admin for the install and
first run of the app, then remove the user form the admin group. Would the
program run fine for them then? Or does the Office part get installed each
time the program starts?

If not I think your best bet would be to contact the maker of the app. There
is not much you can do to lock down the admin of the computer.

hth
DDS W 2k MVP MCSE

"Evan" <anonymous@discussions.microsoft.com> wrote in message
news:09e001c4d897$addefd30$a601280a@phx.gbl...
> One of the main applications that we have on the XP SP2
> image is Hummingbird DM 5 and it needs the user to be
> local admin, otherwise it does not install the Office
> 2003 integration bits. It writes to HKLM etc etc. Bad app
> but we have no choice. So that's why we need users to have
> local administrator access. Believe me, we tried have it
> the other way but it delayed our project to much.
>
> I would expect users not to know how to give themselve the
> rights again. So if you have any ideas on how to do it I
> would greatly appreciate them.
>
> Thanks
> Evan
>
> >-----Original Message-----
> >Not sure you can. Anything you do to lock them down would
> have to be done as
> >administrator. They have administrator rights to the
> computer and they can
> >reverse what ever you just did.
> >
> >You might try this link to see if the app will work when
> logged in as a user
> >instead of admin:
> >http://www.microsoft.com/windowsxp/using/helpandsupport/le
> arnmore/tips/danie
> >ls1.mspx
> >
> >You might also see if they make a version compatible with
> XP.
> >
> >
> >hth
> >DDS W 2k MVP MCSE
> >
> >"Evan" <anonymous@discussions.microsoft.com> wrote in
> message
> >news:081b01c4d887$b37d89b0$a301280a@phx.gbl...
> >> Hi,
> >>
> >> In our company all users on XP are local administrators
> on
> >> their workstations to allow all the legacy apps to
> >> function.
> >>
> >> I would like to restrict the administrators group rights
> >> on the workstation and more importantly prevent users
> from
> >> accessing other users local profiles in Documents and
> >> Settings. How would I go about doing that?
> >>
> >> Any help would be greatly appreciated.
> >>
> >> Thanks.
> >> Evan
> >
> >
> >.
> >