Re: Group Policy Editor

ed black <edblack@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote:
"Lanwench [MVP - Exchange]" wrote:

ed black <ed black@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote:
I run xp media center and the user accounts can't run installed
programs. I went to the group policy editor in an admin account and
clicked the user configuration,software configuration and there is
no software installation node like the help files say there is. I
don't want to let guests run in an admin account. And I want to run
programs that access the web from a limited account for internet
security purposes.

What can I do to allow user groups to access software programs?

I'm presuming you don't mean *all* installed programs, surely. If so,
someone has mucked with things very badly and you may have a
reinstall in your future.

If you mean *some* programs - group policy isn't where you do stuff
like this, especially as you aren't on a domain. Don't do anything
in there.

Instead, you need to find out what permissions the specific problem
apps is expecting (in the registry and file system) and change the
permissions accordingly.

Google for "Process Explorer" - a Sysinternals tool now owned by MS
- and see whether it helps you identify the locations. Log in as an
admin, but launch Process Explorer using runas & specify an admin
account - then try to launch the app.

Oh - and don't forget to complain to the product developers about
their sloppy code. Users should not need admin rights to run desktop
software.





Ok thanks Lanwench! You're right, it's not all apps, just some
apps. I'll try what you suggest. And I'm frustrated with the
developers because when I go to 'Help and Support' from the start
menu, it explains all about the Group Policy editor and how to allow
software permissions in user configuration, then surprise, surprise,
it's not set up on xp media center.

MCE is odd, indeed.

What a waste of a couple hours
fooling around with that. I trusted that the help/support center
installed with the OS would refer to my OS; and that's not the case
here. If I knew who to complain to I would, it's just that sifting
through all the forums, newsgroups, technets is tedious and I can't
seem to find the 'complaints department'

Not sure what you searched for in Help & Support - even *outside* of MCE,
this would not be a group policy issue. If you google for "limited user"
application error <etc> you will find a lot.

You ought to be complaining to the doofuses who wrote the third party
applications which your end users cannot run. :-)


.

Relevant Pages

  • Re: writing to registry in vista from guest account
    ... Once again, I bring you back to *Virtualization* on Vista, because based on each user, they will have their own VirtualStore in the registry or in case of something happening with the file-system such as a folder. ... By making your application to work with Standard user rights, no UAC escalation or prompt is required for the solution to execute. ... You also don't need a manifest for the application, if it's made to run with Standard user rights and not Admin user rights. ... Like I said, even with UAC disabled, your user admin account is not an account that has full admin rights on Vista. ...
    (microsoft.public.dotnet.languages.csharp)
  • Re: Error message trying to download
    ... This posting is provided "AS IS" with no warranties, and confers no rights. ... I can not apply any updates on any machine in the domain. ... I also tried to log on as the local admin account - still ... I then logged on locally with a local admin account. ...
    (microsoft.public.windowsmedia)
  • Re: Screen lock out / power options problem when added to domain
    ... > There screen saver properties are disabled/strange. ... > the LAN password after 15 minutes and when the monitor shuts off. ... > If I log in locally (admin account) I can change the properties. ... > I looked for a group policy for this but can't find anything. ...
    (microsoft.public.win2000.active_directory)
  • Re: How can I change the admin password of all our XP PCs on the doma
    ... You don't go to each workstation and check if that user changed the local admin password. ... If the box has a problem that means you can't use a domain admin account to logon, it is usually quicker to rebuild than troubleshoot. ... If you want to control the Local Administrators on the workstations, just disable the Local Administrator, and then use another GPO or Script that adds a existing security group in your AD as member of the local Administrators on the workstations. ...
    (microsoft.public.windows.server.active_directory)
  • group policy??
    ... I log 0n as admin and in the MMC dept. ... apply to default user permissions a lock out preventing ...
    (microsoft.public.win2000.security)