Never mind how to keep them out, How do you let them in?

  • Thread starter Thread starter John Leonard
  • Start date Start date
J

John Leonard

Hello,

First, my apologies, I don't want to waste your time. I'm not paranoid
like Microsoft. I'm an IT at a local institution. I just want to install
software on my users computers and have it run correctly. NT 4 was Ok, so
what is the problem with Win 2K? I play around with it all I want and I
can't get user's software to run correctly. What is the big idea? Why do
they need (*****ing*) administrator privileges to do anything? Some software
is copy protected, so it needs to access the CD Rom driver in order to
begin.

I don't see the same problems with XP that I do with Win 2K. But I'm not
the boss. I can't just say "upgrade that user's box to XP". Is there any
kind of fix that I can use on Win 2K? If you know, please let me know too.

Thank You,
Yours Truly,
John
 
Is there any
kind of fix that I can use on Win 2K? If you know, please let me know too.
Click to expand...

Download REGMON and FILEMON from www.sysinternals.com first.
Log on as user.
Open REGMON and FILEMON by RUNAS with admin rights.
:again
Run your application as user until an error occur.
Stop scanning in REGMON and FILEMON.
Scan logs for ACCDENIED or ACCESSDENIED which are caused by the
application (there may be others). There is a highlight function
inside or may want to export the logs and use the editor of your
choice.
Change registry permission for the restricted user group with REGEDT32
(RUNAS admin). You may have to change file system from another
workstation connected with admin rights.
Document your changes!
Close application, clear logs, restart logging and
GOTO :again

Repeat until the logs doesn't show any errors related to the
application.

Ciao, Walter
 
Is there any
kind of fix that I can use on Win 2K? If you know, please let me know too.
Click to expand...

After you have fixed your problem on this test machine you have to
deploy your settings.
Registry and file/directory permissions may be deployed by GPOs.
You may want to use SUBINACL to change registry permissions from the
command line (machine login script). XCACLS will be able to change
NTFS permissions.

Ciao, Walter
 
Back
Top