|
Posted by Steven L Umbach on January 4, 2006, 4:42 pm
Please log in for more thread options
First contact Adobe to let them know how upset you are that the user needs
to be a local administrator and the grief it is causing you and ask them if
they have a work around. These companies need to know this is a problem.
If they won't help you can try to make changes on your own. You may find
that the free tools from SysInternals called filemon and regmon can help you
do this by logging on as a regular user and then using runas to start
filemon/regmon with admin credentials just before you try to use the
application. After the application fails stop logging of filemon/regmon and
look in the log for access denied entries which would be a
file/folder/registry key that you need to loosen security on for users to
probably read/list/execute/write/modify and then try it again in a trial and
error fashion to find out where access is being denied. You can configure
the filter in filemon/regmon to highlight text like denied to make it easier
to spot the pertinent entries as there can be thousands in a very short
period of time.
http://www.sysinternals.com/Utilities/Filemon.html --- filemon and link to
SysInternals
The most likely places that you will find permission problems are in the
application folder in program files, the subfolder for the application [if
any] in program files\common files, the subfolder for the application [if
any] in the documents and settings\all users\application data folder, the
\Windows folder and/or subfolders [hopefully not] and the registry keys for
the application under HKLM\software. It is not always possible to make an
application work for a regular user but worth a try.
Since you have XP Pro workstations you can also use Group Policy including
Software Restriction Policies [best done via computer configuration] to lock
down users and manage what software they can install and run keeping in mind
that you can not restrict a truly determined and knowledgeable user that is
also a local administrator who could for instance remove a computer from the
domain or create local user account to logon to. You can implement XP Pro
Group Policy features in a Windows 2000 domain if you are not currently
doing such. --- Steve
http://www.microsoft.com/technet/prodtechnol/winxppro/maintain/rstrplcy.mspx
--- XP Pro Software Restriction Policies
http://support.microsoft.com/default.aspx?scid=kb;%5BLN%5D;307900 --- XP
Pro Group Policy in a Windows 2000 domain.
> Good afternoon.
>
> I have a domain with win2kserver and workstation with winxppro. Some users
> need the program ADOBE PAGE MAKER 6.5 and ADOBE INCOPY CS2. These programs
> just run with administrators users, normal users can`t run them, so I need
> to change the users to local adminin and they have all privileges on their
> workstation. Now they are installing a lot of thing, changing things and
> deleting things.
> Is there a way to them run these programs without the need to be local
> adminins?
>
| 
XML Sitemap