Re: Quickbooks Pro 2002 in limited user account



Hi Bruce, I really appreciated all you said regarding improperly written
programs which do not fair well under the WinXP multiple user accounts with
the different levels of permissions. I am having a simular problem with a
photo editing program I purchased, "Corel Paint Shop Pro XI" where it refuses
to run properly under a Limited Account & is continually attempting to
self-install under the Guest Account.

It is throwing out error after error in Event Viewer and the Corel technical
department claims "registry permissions is not covered under the warranty".
Figures huh? Anyway, do you think the instructions you gave regarding the
Quckbooks Pro Program would work with this Corel program too?

I really don't want to have to remove it as it is a good photo editing
program, but it is a good photo editing program and I paid about a hundred
dollars for it. I am not a beginner, but not anywhere near an expert computer
user. I have worked in the registry, know how to back it up and merge when
needed, so I suppose I am just looking for some reasurrance that this may
work. If so, exactly which permissions and in what key do I change to give
"full" control to all users, even in the Guest Account?

I don't currently have the Guest Account enabled, and really don't intend
to, but this program is still attempting to install itself. Do you have any
idea if these permissions are changed in the registry if it will finanally
finish the install process and stop throwing out all these errors?

Sorry to go on so long, I do tend to chatter too much, but when I read what
you wrote it gave me hope you might be able to finally help me fix this
problem which Corel refuses to touch, (unless I pay them!). Thank you in
advance for any advice you can offer,

Seree
--
seree


"Bruce Chambers" wrote:

JRS wrote:
In an attempt to further secure my system I changed my account in XP Pro to
limited from admin. QB now complains and will not run. How can I get it to
run without reverting to an admin account?

TIA

Jon





Intuit has been stubbornly refusing, for years now, to properly
design their products to work on a properly secured operating system.
This is a key reason that I refuse to purchase their software. Frankly,
I'd recommend that you chose a different product, if possible.

You may experience some problems if the software was designed for
Win9x/Me, or if it was intended for WinNT/2K/XP, but was improperly
designed. Quite simply, the application doesn't "know" how to handle
individual user profiles with differing security permissions levels, or
the application is designed to make to make changes to "off-limits"
sections of the Windows registry or protected Windows system folders.

For example, saved data are often stored in a sub-folder under the
application's folder within C:\Program Files - a place where no
inexperienced or limited user should ever have write permissions.

It may even be that the software requires "write" access to parts
of the registry or protected systems folders/files that are not normally
accessible to regular users. (This *won't* occur if the application is
properly written.) If this does prove to be the case, however, you're
often left with three options: Either grant the necessary users
appropriate higher access privileges (either as Power Users or local
administrators), explicitly grant normal users elevated privileges to
the affected folders and/or part(s) or the registry, or replace the
application with one that was properly designed specifically for
WinNT/2K/XP.

Some Programs Do Not Work If You Log On from Limited Account
http://support.microsoft.com/default.aspx?scid=kb;EN-US;q307091

Additionally, here are a couple of tips suggested, in a reply to a
different post, by MS-MVP Kent W. England:

"If your game or application works with admin accounts, but not with
limited accounts, you can fix it to allow limited users to access the
program files folder with "change" capability rather than "read" which
is the default.

C:\>cacls "Program Files\appfolder" /e /t /p users:c

where "appfolder" is the folder where the application is installed.

If you wish to undo these changes, then run

C:\>cacls "Program Files\appfolder" /e /t /p users:r

If you still have a problem with running the program or saving settings
on limited accounts, you may need to change permissions on the registry
keys. Run regedit.exe and go to HKLM\Software\vendor\app, where
"vendor\app" is the key that the software vendor used for your specific
program. Change the permissions on this key to allow Users full control."


--

Bruce Chambers

Help us help you:
http://dts-l.org/goodpost.htm
http://www.catb.org/~esr/faqs/smart-questions.html

They that can give up essential liberty to obtain a little temporary
safety deserve neither liberty nor safety. -Benjamin Franklin

Many people would rather die than think; in fact, most do. -Bertrand Russell

.



Relevant Pages

  • Re: installing games so other users can access and save their game
    ... Okay here's what I've found in the registry looking at the permissions in the ... " or "OWNER" or my account (which is actually the Owner ... Hit a few times and exited the registry and the rebooted. ... below labeled "Change owner to:" it listed 2 names, "Administrators ...
    (microsoft.public.games)
  • Re: Modifying the Registry
    ... Permissions, other boxes unchecked ... "Will Denny" wrote in message ... Right click on the appropriate setting in the Registry and select ... What have you got enabled for your User Account? ...
    (microsoft.public.windowsxp.general)
  • Re: Quickbooks Pro 2002 in limited user account
    ... I am having a simular problem with a photo editing program I purchased, "Corel Paint Shop Pro XI" where it refuses to run properly under a Limited Account & is continually attempting to self-install under the Guest Account. ... It is throwing out error after error in Event Viewer and the Corel technical department claims "registry permissions is not covered under the warranty". ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Incoming E-Mail - cant create contact in OU
    ... account out of local administrator to attempt to find any denied access. ... I then added full permissions to my user account on both of these keys, ... local admin rights to the server hosting incoming email. ... what permission I need to give the app pool locally to avoid this issue. ...
    (microsoft.public.sharepoint.windowsservices)
  • Re: Incoming E-Mail - cant create contact in OU
    ... account out of local administrator to attempt to find any denied ... I then added full permissions to my user account on both of these keys, ... that's for every app pool you create for every new web app on the ... local admin rights to the server hosting incoming email. ...
    (microsoft.public.sharepoint.windowsservices)