Administrative rights issue

  • Thread starter Thread starter Grace Overstreet
  • Start date Start date
G

Grace Overstreet

We have a win2k server , one domain, mostly win98 clients, and a few win2k
prof clients.
My problem is with the win2k pro clients. In order to install programs onto
the machine, you must be the administrator of the local machine.
I have one legacy program that will not run unless the user has
administrative rights. I have him set up as a power user and have given him
full control rights to the "legacy program" folder. He still can not
operate this program.
If I have it "run as" administrator - the program runs, but then he has
access to the administrator password. Also - then the printer is not
available to him, because he is not connected to the server - and he can't
print any of his work.

I am having trouble with a work around for this and the vendor is no help.

Any help or suggestions would be appreciated.
Thanks
 
-----Original Message-----
We have a win2k server , one domain, mostly win98 clients, and a few win2k
prof clients.
My problem is with the win2k pro clients. In order to install programs onto
the machine, you must be the administrator of the local machine.
I have one legacy program that will not run unless the user has
administrative rights. I have him set up as a power user and have given him
full control rights to the "legacy program" folder. He still can not
operate this program.
If I have it "run as" administrator - the program runs, but then he has
access to the administrator password. Also - then the printer is not
available to him, because he is not connected to the server - and he can't
print any of his work.

I am having trouble with a work around for this and the vendor is no help.

Any help or suggestions would be appreciated.
Thanks


.
Click to expand...
 
Make the user a member of the administrators group on the workstation, or
Run regmon to see which registry keys your legacy app needs and give the
user full control of those keys. Regmon is a sysinternals utility. If
several users need this key you can edit the permissions via group policy .

214752 How to Add Custom Registry Settings to Security Configuration Editor
http://support.microsoft.com/?id=214752

You can use this article as a template for making your permissions changes.

316524 "Administrators Only" Error Message When You Attempt to Use the
Windows
http://support.microsoft.com/?id=316524
 
I don't want the user to be a member of the administrative group on the
workstation. These users are not capable of this kind of access.
Regmon - I will try that. Thanks for the suggestion.
 
Unfortunately no. You can give your users wholesale rights to the registry
in order to run the legacy app, Make them local admins, Run the app from a
terminal server session (if the app is capable) or have the vendor make the
app more NT friendly.
 
Back
Top