Re: Group Policy Editor





"Lanwench [MVP - Exchange]" wrote:

ed black <ed black@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote:
I run xp media center and the user accounts can't run installed
programs. I went to the group policy editor in an admin account and
clicked the user configuration,software configuration and there is no
software installation node like the help files say there is. I don't
want to let guests run in an admin account. And I want to run
programs that access the web from a limited account for internet
security purposes.

What can I do to allow user groups to access software programs?

I'm presuming you don't mean *all* installed programs, surely. If so,
someone has mucked with things very badly and you may have a reinstall in
your future.

If you mean *some* programs - group policy isn't where you do stuff like
this, especially as you aren't on a domain. Don't do anything in there.

Instead, you need to find out what permissions the specific problem apps is
expecting (in the registry and file system) and change the permissions
accordingly.

Google for "Process Explorer" - a Sysinternals tool now owned by MS - and
see whether it helps you identify the locations. Log in as an admin, but
launch Process Explorer using runas & specify an admin account - then try to
launch the app.

Oh - and don't forget to complain to the product developers about their
sloppy code. Users should not need admin rights to run desktop software.





Ok thanks Lanwench! You're right, it's not all apps, just some apps. I'll
try what you suggest. And I'm frustrated with the developers because when I
go to 'Help and Support' from the start menu, it explains all about the Group
Policy editor and how to allow software permissions in user configuration,
then surprise, surprise, it's not set up on xp media center. What a waste of
a couple hours fooling around with that. I trusted that the help/support
center installed with the OS would refer to my OS; and that's not the case
here. If I knew who to complain to I would, it's just that sifting through
all the forums, newsgroups, technets is tedious and I can't seem to find the
'complaints department'
.



Relevant Pages

  • Re: IE7 ActiveX control download problems
    ... It seems you are having problems with Internet Explorer ... Enhanced Security (IEES). ... Logon as an admin account, ... This is a brand new installation, there are no addons as far as I'm ...
    (microsoft.public.windows.terminal_services)
  • Re: Win 2k Pro, Office 2k
    ... I installed and accepted the EULA from the Admin account. ... After working with the Workaround in Article 258847 some more, ... lose the Error 1706 message and get it to recognize the installation CDs ... without any error messages under the User profile. ...
    (microsoft.public.office.setup)
  • Re: Admin & non Admin, NTFS vs FAT32
    ... account for software update and installation. ... I had a non admin account for general everyday operation and all the software worked there. ... "If your game or application works with admin accounts, but not with limited accounts, you can fix it to allow limited users to access the program files folder with "change" capability rather than "read" which is the default. ...
    (microsoft.public.windowsxp.general)
  • Re: Admin & non Admin, NTFS vs FAT32
    ... account for software update and installation. ... I had a non admin account for general everyday operation and all the software worked there. ... I was told by the tech that did the work for me that it was because of the NTFS structure I was unable to create a useable non admin account. ... I was on the Microsoft website and it stated that I could partition part of the hard drive for FAT 32, but won't that destroy the data that's already there? ...
    (microsoft.public.windowsxp.general)
  • Re: Group Policy Editor
    ... don't want to let guests run in an admin account. ... If you mean *some* programs - group policy isn't where you do stuff ... Oh - and don't forget to complain to the product developers about ...
    (microsoft.public.windowsxp.security_admin)