Non admin users cant do things they need to do

G

Guest

I've built my target with two users. "administrator" and "user". User is
not an administrator. I don't want him to be able to mess with the system
too much BUT there are a couple of things he needs to be able to do.

firstly i want my user to be able to have XP Visual Styles on his desktop.

however this is not available as an option on the display control panel Only
windows Classic is available.

When i'm logged on as the administrator i can select Windows XP Style for my
appearance.

How do i get that option for my non administrator user.

Secondly my user needs to be able to set the date and time.

the user account automatically logs on so it would be more convenient to set
these things up as the user rather than having to log off and log on as
administrator. I'm thinking especially about what happens in our production
when new systems are being built and the disks are cloned from a re-sealed
master disk.

If i can get XP styles onto the user account prior to cloning that's not
such a big deal BUT the time setting thing is more important. Our processor
board has no battery backup until it's on the system so they all start off at
1st Jan 2004 which is not good for the data logging we do when our
application is running.
 
S

steves

I always thought that users being unable to set the time was a
&!@!!XX$! decision.
However, I read in Raymond Chen's blog
(http://blogs.msdn.com/oldnewthing/) the reason why: If limited users
can set the time then they can fake out system event logs by changing
the time, doing something, and then setting it back. For example if
you wanted to "backdate" the system data logs, it would be easy to do
so.

I would recommend instead that if your systems are connected to the
internet you enable the internet time synchronization feature in the
time/date control panel. This allows the computer to automatically
get the time from public servers that exist for this purpose. In
addition to being configured through the time/date applet, there are
some simple registry keys available for this purpose:

Copy the following text into a text file, then name it "TimeSync.reg".
Double-click on the file to add data to the registry
Or the .reg file can be imported into component designer to create a
component. (Watch out for missing spaces in reg keys).


;---------- BEGIN TIMESYNC.REG -------------
Windows Registry Editor Version 5.00
;~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
;Enable Time Sync using default windows servers

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\W32Time\Parameters]
"Type"="NTP"
"LocalNTP"=dword:00000000

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\W32Time\TimeProviders\NTPClient]
"SpecialPollInterval"=dword:00015180

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\DateTime\Servers]
"1"="time.windows.com"
"2"="time.nist.gov"

;---------- End TIMESYNC.REG -------------

There probably is some way that you could force a synchronization to
occur at bootup, using a logon script or something...


Having said that, if you absolutely decide you must configure this
right you can do it through a local security policy. (Include component
"Software:: System:: Security:: Applications:: Security Settings
Editor" in your build)

Afte building with that component installed, open the Local Security
Policy Console (Start, run, C:\Windows\System32\secpol.msc) you will
find a number of interesting settings under the following branch:

Security Settings
Local Policies
User Rights Assignment
"Change the System Time"

Be very careful with these settings: if you set this or any of the
other properties to "Users" group, then it will deny access to
everyone else. You must specify all groups that need this right. My
setting for this policy is Administrators, Backup Operators, Power
Users, and Remote Desktop Users.

Finally, I know that some of the GUI components in the "Administrative
Tools" world have a lot of dependencies, and thus tend to "bloat" your
run time. If you are concerned about the size of your image, you
probably want to figure out the registry keys associated with this
policy, and just add the appropriate registry data to your
configuration. (Use SysInternals REGMON while making the above change
to an XP desktop to figure out the reg keys).

SteveS
stevesATeyeDASHimagingDOTcom
 
G

Guest

Thanks Sean and Steve for your replies. and sorry for taking so long to get
back to you.

Unfortunately we can't have the default user as a power user. For security
reasons they need to just be an ordinary user.

However out application looks SO much better running with visual styles we
really need to have this.

On futher invesigation it appears that even a power user can't use XP style
only the administrator can.

Whats even stranger is that an ordinary user on an XP-Pro system CAN have
XP-Styles instead of classic but they can't on XP Embedded.

Could it be tht we're just missing a load of registry settings for our
default user?


steves said:
I always thought that users being unable to set the time was a
&!@!!XX$! decision.
However, I read in Raymond Chen's blog
(http://blogs.msdn.com/oldnewthing/) the reason why: If limited users
can set the time then they can fake out system event logs by changing
the time, doing something, and then setting it back. For example if
you wanted to "backdate" the system data logs, it would be easy to do
so.

I would recommend instead that if your systems are connected to the
internet you enable the internet time synchronization feature in the
time/date control panel. This allows the computer to automatically
get the time from public servers that exist for this purpose. In
addition to being configured through the time/date applet, there are
some simple registry keys available for this purpose:

Copy the following text into a text file, then name it "TimeSync.reg".
Double-click on the file to add data to the registry
Or the .reg file can be imported into component designer to create a
component. (Watch out for missing spaces in reg keys).


;---------- BEGIN TIMESYNC.REG -------------
Windows Registry Editor Version 5.00
;~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
;Enable Time Sync using default windows servers

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\W32Time\Parameters]
"Type"="NTP"
"LocalNTP"=dword:00000000

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\W32Time\TimeProviders\NTPClient]
"SpecialPollInterval"=dword:00015180

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\DateTime\Servers]
"1"="time.windows.com"
"2"="time.nist.gov"

;---------- End TIMESYNC.REG -------------

There probably is some way that you could force a synchronization to
occur at bootup, using a logon script or something...


Having said that, if you absolutely decide you must configure this
right you can do it through a local security policy. (Include component
"Software:: System:: Security:: Applications:: Security Settings
Editor" in your build)

Afte building with that component installed, open the Local Security
Policy Console (Start, run, C:\Windows\System32\secpol.msc) you will
find a number of interesting settings under the following branch:

Security Settings
Local Policies
User Rights Assignment
"Change the System Time"

Be very careful with these settings: if you set this or any of the
other properties to "Users" group, then it will deny access to
everyone else. You must specify all groups that need this right. My
setting for this policy is Administrators, Backup Operators, Power
Users, and Remote Desktop Users.

Finally, I know that some of the GUI components in the "Administrative
Tools" world have a lot of dependencies, and thus tend to "bloat" your
run time. If you are concerned about the size of your image, you
probably want to figure out the registry keys associated with this
policy, and just add the appropriate registry data to your
configuration. (Use SysInternals REGMON while making the above change
to an XP desktop to figure out the reg keys).

SteveS
stevesATeyeDASHimagingDOTcom



Regards,

Sean Liming
www.sjjmicro.com / www.seanliming.com
XP Embedded Book Author - XP Embedded Advanced, XP Embedded Supplemental
Toolkit
 
K

KM

Kevin,
Could it be tht we're just missing a load of registry settings for our
default user?


You may want to check out this policy for the default and created users on your runtime:
[HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System],"NoVisualStyleChoice"

--
=========
Regards,
KM
I always thought that users being unable to set the time was a
&!@!!XX$! decision.
However, I read in Raymond Chen's blog
(http://blogs.msdn.com/oldnewthing/) the reason why: If limited users
can set the time then they can fake out system event logs by changing
the time, doing something, and then setting it back. For example if
you wanted to "backdate" the system data logs, it would be easy to do
so.

I would recommend instead that if your systems are connected to the
internet you enable the internet time synchronization feature in the
time/date control panel. This allows the computer to automatically
get the time from public servers that exist for this purpose. In
addition to being configured through the time/date applet, there are
some simple registry keys available for this purpose:

Copy the following text into a text file, then name it "TimeSync.reg".
Double-click on the file to add data to the registry
Or the .reg file can be imported into component designer to create a
component. (Watch out for missing spaces in reg keys).


;---------- BEGIN TIMESYNC.REG -------------
Windows Registry Editor Version 5.00
;~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
;Enable Time Sync using default windows servers

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\W32Time\Parameters]
"Type"="NTP"
"LocalNTP"=dword:00000000

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\W32Time\TimeProviders\NTPClient]
"SpecialPollInterval"=dword:00015180

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\DateTime\Servers]
"1"="time.windows.com"
"2"="time.nist.gov"

;---------- End TIMESYNC.REG -------------

There probably is some way that you could force a synchronization to
occur at bootup, using a logon script or something...


Having said that, if you absolutely decide you must configure this
right you can do it through a local security policy. (Include component
"Software:: System:: Security:: Applications:: Security Settings
Editor" in your build)

Afte building with that component installed, open the Local Security
Policy Console (Start, run, C:\Windows\System32\secpol.msc) you will
find a number of interesting settings under the following branch:

Security Settings
Local Policies
User Rights Assignment
"Change the System Time"

Be very careful with these settings: if you set this or any of the
other properties to "Users" group, then it will deny access to
everyone else. You must specify all groups that need this right. My
setting for this policy is Administrators, Backup Operators, Power
Users, and Remote Desktop Users.

Finally, I know that some of the GUI components in the "Administrative
Tools" world have a lot of dependencies, and thus tend to "bloat" your
run time. If you are concerned about the size of your image, you
probably want to figure out the registry keys associated with this
policy, and just add the appropriate registry data to your
configuration. (Use SysInternals REGMON while making the above change
to an XP desktop to figure out the reg keys).

SteveS
stevesATeyeDASHimagingDOTcom



Regards,

Sean Liming
www.sjjmicro.com / www.seanliming.com
XP Embedded Book Author - XP Embedded Advanced, XP Embedded Supplemental
Toolkit


I've built my target with two users. "administrator" and "user". User is
not an administrator. I don't want him to be able to mess with the system
too much BUT there are a couple of things he needs to be able to do.

firstly i want my user to be able to have XP Visual Styles on his desktop.

however this is not available as an option on the display control panel
Only
windows Classic is available.

When i'm logged on as the administrator i can select Windows XP Style for
my
appearance.

How do i get that option for my non administrator user.

Secondly my user needs to be able to set the date and time.

the user account automatically logs on so it would be more convenient to
set
these things up as the user rather than having to log off and log on as
administrator. I'm thinking especially about what happens in our
production
when new systems are being built and the disks are cloned from a re-sealed
master disk.

If i can get XP styles onto the user account prior to cloning that's not
such a big deal BUT the time setting thing is more important. Our
processor
board has no battery backup until it's on the system so they all start off
at
1st Jan 2004 which is not good for the data logging we do when our
application is running.
 
G

Guest

Thanks KM

That pointer put me on the right track.

the following keys are significant
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\system]
"NoVisualStyleChoice"=dword:00000000
"SetVisualStyle"="C:\WINDOWS\Resources\Themes\Luna\luna.msstyles"

You need both of them to get Visula Styles on all users.

Whats interesting is that these keys DONT exist on my XP-Pro system but
everyone has Visual Styles

However i don't care now i've got a fix that i can use to do what i need.

thanks for your help


KM said:
Kevin,
Could it be tht we're just missing a load of registry settings for our
default user?


You may want to check out this policy for the default and created users on your runtime:
[HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System],"NoVisualStyleChoice"

--
=========
Regards,
KM
I always thought that users being unable to set the time was a
&!@!!XX$! decision.
However, I read in Raymond Chen's blog
(http://blogs.msdn.com/oldnewthing/) the reason why: If limited users
can set the time then they can fake out system event logs by changing
the time, doing something, and then setting it back. For example if
you wanted to "backdate" the system data logs, it would be easy to do
so.

I would recommend instead that if your systems are connected to the
internet you enable the internet time synchronization feature in the
time/date control panel. This allows the computer to automatically
get the time from public servers that exist for this purpose. In
addition to being configured through the time/date applet, there are
some simple registry keys available for this purpose:

Copy the following text into a text file, then name it "TimeSync.reg".
Double-click on the file to add data to the registry
Or the .reg file can be imported into component designer to create a
component. (Watch out for missing spaces in reg keys).


;---------- BEGIN TIMESYNC.REG -------------
Windows Registry Editor Version 5.00
;~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
;Enable Time Sync using default windows servers

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\W32Time\Parameters]
"Type"="NTP"
"LocalNTP"=dword:00000000

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\W32Time\TimeProviders\NTPClient]
"SpecialPollInterval"=dword:00015180

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\DateTime\Servers]
"1"="time.windows.com"
"2"="time.nist.gov"

;---------- End TIMESYNC.REG -------------

There probably is some way that you could force a synchronization to
occur at bootup, using a logon script or something...


Having said that, if you absolutely decide you must configure this
right you can do it through a local security policy. (Include component
"Software:: System:: Security:: Applications:: Security Settings
Editor" in your build)

Afte building with that component installed, open the Local Security
Policy Console (Start, run, C:\Windows\System32\secpol.msc) you will
find a number of interesting settings under the following branch:

Security Settings
Local Policies
User Rights Assignment
"Change the System Time"

Be very careful with these settings: if you set this or any of the
other properties to "Users" group, then it will deny access to
everyone else. You must specify all groups that need this right. My
setting for this policy is Administrators, Backup Operators, Power
Users, and Remote Desktop Users.

Finally, I know that some of the GUI components in the "Administrative
Tools" world have a lot of dependencies, and thus tend to "bloat" your
run time. If you are concerned about the size of your image, you
probably want to figure out the registry keys associated with this
policy, and just add the appropriate registry data to your
configuration. (Use SysInternals REGMON while making the above change
to an XP desktop to figure out the reg keys).

SteveS
stevesATeyeDASHimagingDOTcom




Regards,

Sean Liming
www.sjjmicro.com / www.seanliming.com
XP Embedded Book Author - XP Embedded Advanced, XP Embedded Supplemental
Toolkit


I've built my target with two users. "administrator" and "user". User is
not an administrator. I don't want him to be able to mess with the system
too much BUT there are a couple of things he needs to be able to do.

firstly i want my user to be able to have XP Visual Styles on his desktop.

however this is not available as an option on the display control panel
Only
windows Classic is available.

When i'm logged on as the administrator i can select Windows XP Style for
my
appearance.

How do i get that option for my non administrator user.

Secondly my user needs to be able to set the date and time.

the user account automatically logs on so it would be more convenient to
set
these things up as the user rather than having to log off and log on as
administrator. I'm thinking especially about what happens in our
production
when new systems are being built and the disks are cloned from a re-sealed
master disk.

If i can get XP styles onto the user account prior to cloning that's not
such a big deal BUT the time setting thing is more important. Our
processor
board has no battery backup until it's on the system so they all start off
at
1st Jan 2004 which is not good for the data logging we do when our
application is running.
 
G

Guest

OK so now i'm really confused.

i added the keys below to the registry (as administrator) logged off, logged
back on as user and the luna styles were there.

I shut down the system, turned it back on and they have gone again.



Kevin Benstead said:
Thanks KM

That pointer put me on the right track.

the following keys are significant
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\system]
"NoVisualStyleChoice"=dword:00000000
"SetVisualStyle"="C:\WINDOWS\Resources\Themes\Luna\luna.msstyles"

You need both of them to get Visula Styles on all users.

Whats interesting is that these keys DONT exist on my XP-Pro system but
everyone has Visual Styles

However i don't care now i've got a fix that i can use to do what i need.

thanks for your help


KM said:
Kevin,
Could it be tht we're just missing a load of registry settings for our
default user?


You may want to check out this policy for the default and created users on your runtime:
[HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System],"NoVisualStyleChoice"

--
=========
Regards,
KM
I always thought that users being unable to set the time was a
&!@!!XX$! decision.
However, I read in Raymond Chen's blog
(http://blogs.msdn.com/oldnewthing/) the reason why: If limited users
can set the time then they can fake out system event logs by changing
the time, doing something, and then setting it back. For example if
you wanted to "backdate" the system data logs, it would be easy to do
so.

I would recommend instead that if your systems are connected to the
internet you enable the internet time synchronization feature in the
time/date control panel. This allows the computer to automatically
get the time from public servers that exist for this purpose. In
addition to being configured through the time/date applet, there are
some simple registry keys available for this purpose:

Copy the following text into a text file, then name it "TimeSync.reg".
Double-click on the file to add data to the registry
Or the .reg file can be imported into component designer to create a
component. (Watch out for missing spaces in reg keys).


;---------- BEGIN TIMESYNC.REG -------------
Windows Registry Editor Version 5.00
;~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
;Enable Time Sync using default windows servers

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\W32Time\Parameters]
"Type"="NTP"
"LocalNTP"=dword:00000000

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\W32Time\TimeProviders\NTPClient]
"SpecialPollInterval"=dword:00015180

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\DateTime\Servers]
"1"="time.windows.com"
"2"="time.nist.gov"

;---------- End TIMESYNC.REG -------------

There probably is some way that you could force a synchronization to
occur at bootup, using a logon script or something...


Having said that, if you absolutely decide you must configure this
right you can do it through a local security policy. (Include component
"Software:: System:: Security:: Applications:: Security Settings
Editor" in your build)

Afte building with that component installed, open the Local Security
Policy Console (Start, run, C:\Windows\System32\secpol.msc) you will
find a number of interesting settings under the following branch:

Security Settings
Local Policies
User Rights Assignment
"Change the System Time"

Be very careful with these settings: if you set this or any of the
other properties to "Users" group, then it will deny access to
everyone else. You must specify all groups that need this right. My
setting for this policy is Administrators, Backup Operators, Power
Users, and Remote Desktop Users.

Finally, I know that some of the GUI components in the "Administrative
Tools" world have a lot of dependencies, and thus tend to "bloat" your
run time. If you are concerned about the size of your image, you
probably want to figure out the registry keys associated with this
policy, and just add the appropriate registry data to your
configuration. (Use SysInternals REGMON while making the above change
to an XP desktop to figure out the reg keys).

SteveS
stevesATeyeDASHimagingDOTcom




Regards,

Sean Liming
www.sjjmicro.com / www.seanliming.com
XP Embedded Book Author - XP Embedded Advanced, XP Embedded Supplemental
Toolkit


I've built my target with two users. "administrator" and "user". User is
not an administrator. I don't want him to be able to mess with the system
too much BUT there are a couple of things he needs to be able to do.

firstly i want my user to be able to have XP Visual Styles on his desktop.

however this is not available as an option on the display control panel
Only
windows Classic is available.

When i'm logged on as the administrator i can select Windows XP Style for
my
appearance.

How do i get that option for my non administrator user.

Secondly my user needs to be able to set the date and time.

the user account automatically logs on so it would be more convenient to
set
these things up as the user rather than having to log off and log on as
administrator. I'm thinking especially about what happens in our
production
when new systems are being built and the disks are cloned from a re-sealed
master disk.

If i can get XP styles onto the user account prior to cloning that's not
such a big deal BUT the time setting thing is more important. Our
processor
board has no battery backup until it's on the system so they all start off
at
1st Jan 2004 which is not good for the data logging we do when our
application is running.
 
K

KM

Kevin,

You mean they are along with the registry entires?

Are you running the OS protected by EWF?

--
=========
Regards,
KM
OK so now i'm really confused.

i added the keys below to the registry (as administrator) logged off, logged
back on as user and the luna styles were there.

I shut down the system, turned it back on and they have gone again.



Kevin Benstead said:
Thanks KM

That pointer put me on the right track.

the following keys are significant
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\system]
"NoVisualStyleChoice"=dword:00000000
"SetVisualStyle"="C:\WINDOWS\Resources\Themes\Luna\luna.msstyles"

You need both of them to get Visula Styles on all users.

Whats interesting is that these keys DONT exist on my XP-Pro system but
everyone has Visual Styles

However i don't care now i've got a fix that i can use to do what i need.

thanks for your help


KM said:
Kevin,

Could it be tht we're just missing a load of registry settings for our
default user?


You may want to check out this policy for the default and created users on your runtime:
[HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System],"NoVisualStyleChoice"

--
=========
Regards,
KM

I always thought that users being unable to set the time was a
&!@!!XX$! decision.
However, I read in Raymond Chen's blog
(http://blogs.msdn.com/oldnewthing/) the reason why: If limited users
can set the time then they can fake out system event logs by changing
the time, doing something, and then setting it back. For example if
you wanted to "backdate" the system data logs, it would be easy to do
so.

I would recommend instead that if your systems are connected to the
internet you enable the internet time synchronization feature in the
time/date control panel. This allows the computer to automatically
get the time from public servers that exist for this purpose. In
addition to being configured through the time/date applet, there are
some simple registry keys available for this purpose:

Copy the following text into a text file, then name it "TimeSync.reg".
Double-click on the file to add data to the registry
Or the .reg file can be imported into component designer to create a
component. (Watch out for missing spaces in reg keys).


;---------- BEGIN TIMESYNC.REG -------------
Windows Registry Editor Version 5.00
;~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
;Enable Time Sync using default windows servers

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\W32Time\Parameters]
"Type"="NTP"
"LocalNTP"=dword:00000000

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\W32Time\TimeProviders\NTPClient]
"SpecialPollInterval"=dword:00015180

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\DateTime\Servers]
"1"="time.windows.com"
"2"="time.nist.gov"

;---------- End TIMESYNC.REG -------------

There probably is some way that you could force a synchronization to
occur at bootup, using a logon script or something...


Having said that, if you absolutely decide you must configure this
right you can do it through a local security policy. (Include component
"Software:: System:: Security:: Applications:: Security Settings
Editor" in your build)

Afte building with that component installed, open the Local Security
Policy Console (Start, run, C:\Windows\System32\secpol.msc) you will
find a number of interesting settings under the following branch:

Security Settings
Local Policies
User Rights Assignment
"Change the System Time"

Be very careful with these settings: if you set this or any of the
other properties to "Users" group, then it will deny access to
everyone else. You must specify all groups that need this right. My
setting for this policy is Administrators, Backup Operators, Power
Users, and Remote Desktop Users.

Finally, I know that some of the GUI components in the "Administrative
Tools" world have a lot of dependencies, and thus tend to "bloat" your
run time. If you are concerned about the size of your image, you
probably want to figure out the registry keys associated with this
policy, and just add the appropriate registry data to your
configuration. (Use SysInternals REGMON while making the above change
to an XP desktop to figure out the reg keys).

SteveS
stevesATeyeDASHimagingDOTcom




Regards,

Sean Liming
www.sjjmicro.com / www.seanliming.com
XP Embedded Book Author - XP Embedded Advanced, XP Embedded Supplemental
Toolkit


I've built my target with two users. "administrator" and "user". User is
not an administrator. I don't want him to be able to mess with the system
too much BUT there are a couple of things he needs to be able to do.

firstly i want my user to be able to have XP Visual Styles on his desktop.

however this is not available as an option on the display control panel
Only
windows Classic is available.

When i'm logged on as the administrator i can select Windows XP Style for
my
appearance.

How do i get that option for my non administrator user.

Secondly my user needs to be able to set the date and time.

the user account automatically logs on so it would be more convenient to
set
these things up as the user rather than having to log off and log on as
administrator. I'm thinking especially about what happens in our
production
when new systems are being built and the disks are cloned from a re-sealed
master disk.

If i can get XP styles onto the user account prior to cloning that's not
such a big deal BUT the time setting thing is more important. Our
processor
board has no battery backup until it's on the system so they all start off
at
1st Jan 2004 which is not good for the data logging we do when our
application is running.
 
G

Guest

i should have said. no i'm not using EWF.

strangely enough the registy entries are still there.

i'm in the middle of an experiment to remove the "User" account and then add
a new one to see if a new account inherits something that the old one did not
have.



KM said:
Kevin,

You mean they are along with the registry entires?

Are you running the OS protected by EWF?

--
=========
Regards,
KM
OK so now i'm really confused.

i added the keys below to the registry (as administrator) logged off, logged
back on as user and the luna styles were there.

I shut down the system, turned it back on and they have gone again.



Kevin Benstead said:
Thanks KM

That pointer put me on the right track.

the following keys are significant
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\system]
"NoVisualStyleChoice"=dword:00000000
"SetVisualStyle"="C:\WINDOWS\Resources\Themes\Luna\luna.msstyles"

You need both of them to get Visula Styles on all users.

Whats interesting is that these keys DONT exist on my XP-Pro system but
everyone has Visual Styles

However i don't care now i've got a fix that i can use to do what i need.

thanks for your help


:

Kevin,

Could it be tht we're just missing a load of registry settings for our
default user?


You may want to check out this policy for the default and created users on your runtime:
[HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System],"NoVisualStyleChoice"

--
=========
Regards,
KM

I always thought that users being unable to set the time was a
&!@!!XX$! decision.
However, I read in Raymond Chen's blog
(http://blogs.msdn.com/oldnewthing/) the reason why: If limited users
can set the time then they can fake out system event logs by changing
the time, doing something, and then setting it back. For example if
you wanted to "backdate" the system data logs, it would be easy to do
so.

I would recommend instead that if your systems are connected to the
internet you enable the internet time synchronization feature in the
time/date control panel. This allows the computer to automatically
get the time from public servers that exist for this purpose. In
addition to being configured through the time/date applet, there are
some simple registry keys available for this purpose:

Copy the following text into a text file, then name it "TimeSync.reg".
Double-click on the file to add data to the registry
Or the .reg file can be imported into component designer to create a
component. (Watch out for missing spaces in reg keys).


;---------- BEGIN TIMESYNC.REG -------------
Windows Registry Editor Version 5.00
;~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
;Enable Time Sync using default windows servers

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\W32Time\Parameters]
"Type"="NTP"
"LocalNTP"=dword:00000000

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\W32Time\TimeProviders\NTPClient]
"SpecialPollInterval"=dword:00015180

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\DateTime\Servers]
"1"="time.windows.com"
"2"="time.nist.gov"

;---------- End TIMESYNC.REG -------------

There probably is some way that you could force a synchronization to
occur at bootup, using a logon script or something...


Having said that, if you absolutely decide you must configure this
right you can do it through a local security policy. (Include component
"Software:: System:: Security:: Applications:: Security Settings
Editor" in your build)

Afte building with that component installed, open the Local Security
Policy Console (Start, run, C:\Windows\System32\secpol.msc) you will
find a number of interesting settings under the following branch:

Security Settings
Local Policies
User Rights Assignment
"Change the System Time"

Be very careful with these settings: if you set this or any of the
other properties to "Users" group, then it will deny access to
everyone else. You must specify all groups that need this right. My
setting for this policy is Administrators, Backup Operators, Power
Users, and Remote Desktop Users.

Finally, I know that some of the GUI components in the "Administrative
Tools" world have a lot of dependencies, and thus tend to "bloat" your
run time. If you are concerned about the size of your image, you
probably want to figure out the registry keys associated with this
policy, and just add the appropriate registry data to your
configuration. (Use SysInternals REGMON while making the above change
to an XP desktop to figure out the reg keys).

SteveS
stevesATeyeDASHimagingDOTcom




Regards,

Sean Liming
www.sjjmicro.com / www.seanliming.com
XP Embedded Book Author - XP Embedded Advanced, XP Embedded Supplemental
Toolkit


I've built my target with two users. "administrator" and "user". User is
not an administrator. I don't want him to be able to mess with the system
too much BUT there are a couple of things he needs to be able to do.

firstly i want my user to be able to have XP Visual Styles on his desktop.

however this is not available as an option on the display control panel
Only
windows Classic is available.

When i'm logged on as the administrator i can select Windows XP Style for
my
appearance.

How do i get that option for my non administrator user.

Secondly my user needs to be able to set the date and time.

the user account automatically logs on so it would be more convenient to
set
these things up as the user rather than having to log off and log on as
administrator. I'm thinking especially about what happens in our
production
when new systems are being built and the disks are cloned from a re-sealed
master disk.

If i can get XP styles onto the user account prior to cloning that's not
such a big deal BUT the time setting thing is more important. Our
processor
board has no battery backup until it's on the system so they all start off
at
1st Jan 2004 which is not good for the data logging we do when our
application is running.
 
G

Guest

Now it's getting even more freaky.

I've re-built my XPe system so that all the changes i previously made have
disappreared.

When i log on the FIRST time as User i've not got Luna (XP Visual Style
under Display/Appearence)

BUT if i just log off and back on again it's there.

In fact if a set the desktop to one of the XP Visual Styles and then
shutdown, after i log on the first time the desktop colour scheme is all
screwed up but if i just log off and on again then i get the XP-Visual Styles
colour scheme i chose.

So it can't be anything to do with permissions (i have not changed any).

My only thought is that something is not getting initialised (a service?)
until after i've logged in the first time after which i can use Visual Styles

Any help would be appreciated


Kevin Benstead said:
i should have said. no i'm not using EWF.

strangely enough the registy entries are still there.

i'm in the middle of an experiment to remove the "User" account and then add
a new one to see if a new account inherits something that the old one did not
have.



KM said:
Kevin,

You mean they are along with the registry entires?

Are you running the OS protected by EWF?

--
=========
Regards,
KM
OK so now i'm really confused.

i added the keys below to the registry (as administrator) logged off, logged
back on as user and the luna styles were there.

I shut down the system, turned it back on and they have gone again.



:

Thanks KM

That pointer put me on the right track.

the following keys are significant
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\system]
"NoVisualStyleChoice"=dword:00000000
"SetVisualStyle"="C:\WINDOWS\Resources\Themes\Luna\luna.msstyles"

You need both of them to get Visula Styles on all users.

Whats interesting is that these keys DONT exist on my XP-Pro system but
everyone has Visual Styles

However i don't care now i've got a fix that i can use to do what i need.

thanks for your help


:

Kevin,

Could it be tht we're just missing a load of registry settings for our
default user?


You may want to check out this policy for the default and created users on your runtime:
[HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System],"NoVisualStyleChoice"

--
=========
Regards,
KM

I always thought that users being unable to set the time was a
&!@!!XX$! decision.
However, I read in Raymond Chen's blog
(http://blogs.msdn.com/oldnewthing/) the reason why: If limited users
can set the time then they can fake out system event logs by changing
the time, doing something, and then setting it back. For example if
you wanted to "backdate" the system data logs, it would be easy to do
so.

I would recommend instead that if your systems are connected to the
internet you enable the internet time synchronization feature in the
time/date control panel. This allows the computer to automatically
get the time from public servers that exist for this purpose. In
addition to being configured through the time/date applet, there are
some simple registry keys available for this purpose:

Copy the following text into a text file, then name it "TimeSync.reg".
Double-click on the file to add data to the registry
Or the .reg file can be imported into component designer to create a
component. (Watch out for missing spaces in reg keys).


;---------- BEGIN TIMESYNC.REG -------------
Windows Registry Editor Version 5.00
;~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
;Enable Time Sync using default windows servers

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\W32Time\Parameters]
"Type"="NTP"
"LocalNTP"=dword:00000000

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\W32Time\TimeProviders\NTPClient]
"SpecialPollInterval"=dword:00015180

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\DateTime\Servers]
"1"="time.windows.com"
"2"="time.nist.gov"

;---------- End TIMESYNC.REG -------------

There probably is some way that you could force a synchronization to
occur at bootup, using a logon script or something...


Having said that, if you absolutely decide you must configure this
right you can do it through a local security policy. (Include component
"Software:: System:: Security:: Applications:: Security Settings
Editor" in your build)

Afte building with that component installed, open the Local Security
Policy Console (Start, run, C:\Windows\System32\secpol.msc) you will
find a number of interesting settings under the following branch:

Security Settings
Local Policies
User Rights Assignment
"Change the System Time"

Be very careful with these settings: if you set this or any of the
other properties to "Users" group, then it will deny access to
everyone else. You must specify all groups that need this right. My
setting for this policy is Administrators, Backup Operators, Power
Users, and Remote Desktop Users.

Finally, I know that some of the GUI components in the "Administrative
Tools" world have a lot of dependencies, and thus tend to "bloat" your
run time. If you are concerned about the size of your image, you
probably want to figure out the registry keys associated with this
policy, and just add the appropriate registry data to your
configuration. (Use SysInternals REGMON while making the above change
to an XP desktop to figure out the reg keys).

SteveS
stevesATeyeDASHimagingDOTcom




Regards,

Sean Liming
www.sjjmicro.com / www.seanliming.com
XP Embedded Book Author - XP Embedded Advanced, XP Embedded Supplemental
Toolkit


I've built my target with two users. "administrator" and "user". User is
not an administrator. I don't want him to be able to mess with the system
too much BUT there are a couple of things he needs to be able to do.

firstly i want my user to be able to have XP Visual Styles on his desktop.

however this is not available as an option on the display control panel
Only
windows Classic is available.

When i'm logged on as the administrator i can select Windows XP Style for
my
appearance.

How do i get that option for my non administrator user.

Secondly my user needs to be able to set the date and time.

the user account automatically logs on so it would be more convenient to
set
these things up as the user rather than having to log off and log on as
administrator. I'm thinking especially about what happens in our
production
when new systems are being built and the disks are cloned from a re-sealed
master disk.

If i can get XP styles onto the user account prior to cloning that's not
such a big deal BUT the time setting thing is more important. Our
processor
board has no battery backup until it's on the system so they all start off
at
1st Jan 2004 which is not good for the data logging we do when our
application is running.
 
K

KM

Kevin,

Maybe "Themes" service state is set to on-demand? If so, change it to Automatic.

--
=========
Regards,
KM
Now it's getting even more freaky.

I've re-built my XPe system so that all the changes i previously made have
disappreared.

When i log on the FIRST time as User i've not got Luna (XP Visual Style
under Display/Appearence)

BUT if i just log off and back on again it's there.

In fact if a set the desktop to one of the XP Visual Styles and then
shutdown, after i log on the first time the desktop colour scheme is all
screwed up but if i just log off and on again then i get the XP-Visual Styles
colour scheme i chose.

So it can't be anything to do with permissions (i have not changed any).

My only thought is that something is not getting initialised (a service?)
until after i've logged in the first time after which i can use Visual Styles

Any help would be appreciated


Kevin Benstead said:
i should have said. no i'm not using EWF.

strangely enough the registy entries are still there.

i'm in the middle of an experiment to remove the "User" account and then add
a new one to see if a new account inherits something that the old one did not
have.



KM said:
Kevin,

You mean they are along with the registry entires?

Are you running the OS protected by EWF?

--
=========
Regards,
KM

OK so now i'm really confused.

i added the keys below to the registry (as administrator) logged off, logged
back on as user and the luna styles were there.

I shut down the system, turned it back on and they have gone again.



:

Thanks KM

That pointer put me on the right track.

the following keys are significant
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\system]
"NoVisualStyleChoice"=dword:00000000
"SetVisualStyle"="C:\WINDOWS\Resources\Themes\Luna\luna.msstyles"

You need both of them to get Visula Styles on all users.

Whats interesting is that these keys DONT exist on my XP-Pro system but
everyone has Visual Styles

However i don't care now i've got a fix that i can use to do what i need.

thanks for your help


:

Kevin,

Could it be tht we're just missing a load of registry settings for our
default user?


You may want to check out this policy for the default and created users on your runtime:
[HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System],"NoVisualStyleChoice"

--
=========
Regards,
KM

I always thought that users being unable to set the time was a
&!@!!XX$! decision.
However, I read in Raymond Chen's blog
(http://blogs.msdn.com/oldnewthing/) the reason why: If limited users
can set the time then they can fake out system event logs by changing
the time, doing something, and then setting it back. For example if
you wanted to "backdate" the system data logs, it would be easy to do
so.

I would recommend instead that if your systems are connected to the
internet you enable the internet time synchronization feature in the
time/date control panel. This allows the computer to automatically
get the time from public servers that exist for this purpose. In
addition to being configured through the time/date applet, there are
some simple registry keys available for this purpose:

Copy the following text into a text file, then name it "TimeSync.reg".
Double-click on the file to add data to the registry
Or the .reg file can be imported into component designer to create a
component. (Watch out for missing spaces in reg keys).


;---------- BEGIN TIMESYNC.REG -------------
Windows Registry Editor Version 5.00
;~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
;Enable Time Sync using default windows servers

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\W32Time\Parameters]
"Type"="NTP"
"LocalNTP"=dword:00000000

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\W32Time\TimeProviders\NTPClient]
"SpecialPollInterval"=dword:00015180

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\DateTime\Servers]
"1"="time.windows.com"
"2"="time.nist.gov"

;---------- End TIMESYNC.REG -------------

There probably is some way that you could force a synchronization to
occur at bootup, using a logon script or something...


Having said that, if you absolutely decide you must configure this
right you can do it through a local security policy. (Include component
"Software:: System:: Security:: Applications:: Security Settings
Editor" in your build)

Afte building with that component installed, open the Local Security
Policy Console (Start, run, C:\Windows\System32\secpol.msc) you will
find a number of interesting settings under the following branch:

Security Settings
Local Policies
User Rights Assignment
"Change the System Time"

Be very careful with these settings: if you set this or any of the
other properties to "Users" group, then it will deny access to
everyone else. You must specify all groups that need this right. My
setting for this policy is Administrators, Backup Operators, Power
Users, and Remote Desktop Users.

Finally, I know that some of the GUI components in the "Administrative
Tools" world have a lot of dependencies, and thus tend to "bloat" your
run time. If you are concerned about the size of your image, you
probably want to figure out the registry keys associated with this
policy, and just add the appropriate registry data to your
configuration. (Use SysInternals REGMON while making the above change
to an XP desktop to figure out the reg keys).

SteveS
stevesATeyeDASHimagingDOTcom




Regards,

Sean Liming
www.sjjmicro.com / www.seanliming.com
XP Embedded Book Author - XP Embedded Advanced, XP Embedded Supplemental
Toolkit


I've built my target with two users. "administrator" and "user". User is
not an administrator. I don't want him to be able to mess with the system
too much BUT there are a couple of things he needs to be able to do.

firstly i want my user to be able to have XP Visual Styles on his desktop.

however this is not available as an option on the display control panel
Only
windows Classic is available.

When i'm logged on as the administrator i can select Windows XP Style for
my
appearance.

How do i get that option for my non administrator user.

Secondly my user needs to be able to set the date and time.

the user account automatically logs on so it would be more convenient to
set
these things up as the user rather than having to log off and log on as
administrator. I'm thinking especially about what happens in our
production
when new systems are being built and the disks are cloned from a re-sealed
master disk.

If i can get XP styles onto the user account prior to cloning that's not
such a big deal BUT the time setting thing is more important. Our
processor
board has no battery backup until it's on the system so they all start off
at
1st Jan 2004 which is not good for the data logging we do when our
application is running.
 
G

Guest

KM

I checked this morning.

The Themes service is set to Automatic...........

Is there a log file i can look at which tells me when the service actually
starts compared to when i log in, there's nothing in the event viewer.

Is it possible it does not start until a user logs in (by which time it's
too late). I've tried waiting for 5 minutes before logging on to see if that
helps but no use.

Thanks for your help


KM said:
Kevin,

Maybe "Themes" service state is set to on-demand? If so, change it to Automatic.

--
=========
Regards,
KM
Now it's getting even more freaky.

I've re-built my XPe system so that all the changes i previously made have
disappreared.

When i log on the FIRST time as User i've not got Luna (XP Visual Style
under Display/Appearence)

BUT if i just log off and back on again it's there.

In fact if a set the desktop to one of the XP Visual Styles and then
shutdown, after i log on the first time the desktop colour scheme is all
screwed up but if i just log off and on again then i get the XP-Visual Styles
colour scheme i chose.

So it can't be anything to do with permissions (i have not changed any).

My only thought is that something is not getting initialised (a service?)
until after i've logged in the first time after which i can use Visual Styles

Any help would be appreciated


Kevin Benstead said:
i should have said. no i'm not using EWF.

strangely enough the registy entries are still there.

i'm in the middle of an experiment to remove the "User" account and then add
a new one to see if a new account inherits something that the old one did not
have.



:

Kevin,

You mean they are along with the registry entires?

Are you running the OS protected by EWF?

--
=========
Regards,
KM

OK so now i'm really confused.

i added the keys below to the registry (as administrator) logged off, logged
back on as user and the luna styles were there.

I shut down the system, turned it back on and they have gone again.



:

Thanks KM

That pointer put me on the right track.

the following keys are significant
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\system]
"NoVisualStyleChoice"=dword:00000000
"SetVisualStyle"="C:\WINDOWS\Resources\Themes\Luna\luna.msstyles"

You need both of them to get Visula Styles on all users.

Whats interesting is that these keys DONT exist on my XP-Pro system but
everyone has Visual Styles

However i don't care now i've got a fix that i can use to do what i need.

thanks for your help


:

Kevin,

Could it be tht we're just missing a load of registry settings for our
default user?


You may want to check out this policy for the default and created users on your runtime:
[HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System],"NoVisualStyleChoice"

--
=========
Regards,
KM

I always thought that users being unable to set the time was a
&!@!!XX$! decision.
However, I read in Raymond Chen's blog
(http://blogs.msdn.com/oldnewthing/) the reason why: If limited users
can set the time then they can fake out system event logs by changing
the time, doing something, and then setting it back. For example if
you wanted to "backdate" the system data logs, it would be easy to do
so.

I would recommend instead that if your systems are connected to the
internet you enable the internet time synchronization feature in the
time/date control panel. This allows the computer to automatically
get the time from public servers that exist for this purpose. In
addition to being configured through the time/date applet, there are
some simple registry keys available for this purpose:

Copy the following text into a text file, then name it "TimeSync.reg".
Double-click on the file to add data to the registry
Or the .reg file can be imported into component designer to create a
component. (Watch out for missing spaces in reg keys).


;---------- BEGIN TIMESYNC.REG -------------
Windows Registry Editor Version 5.00
;~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
;Enable Time Sync using default windows servers

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\W32Time\Parameters]
"Type"="NTP"
"LocalNTP"=dword:00000000

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\W32Time\TimeProviders\NTPClient]
"SpecialPollInterval"=dword:00015180

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\DateTime\Servers]
"1"="time.windows.com"
"2"="time.nist.gov"

;---------- End TIMESYNC.REG -------------

There probably is some way that you could force a synchronization to
occur at bootup, using a logon script or something...


Having said that, if you absolutely decide you must configure this
right you can do it through a local security policy. (Include component
"Software:: System:: Security:: Applications:: Security Settings
Editor" in your build)

Afte building with that component installed, open the Local Security
Policy Console (Start, run, C:\Windows\System32\secpol.msc) you will
find a number of interesting settings under the following branch:

Security Settings
Local Policies
User Rights Assignment
"Change the System Time"

Be very careful with these settings: if you set this or any of the
other properties to "Users" group, then it will deny access to
everyone else. You must specify all groups that need this right. My
setting for this policy is Administrators, Backup Operators, Power
Users, and Remote Desktop Users.

Finally, I know that some of the GUI components in the "Administrative
Tools" world have a lot of dependencies, and thus tend to "bloat" your
run time. If you are concerned about the size of your image, you
probably want to figure out the registry keys associated with this
policy, and just add the appropriate registry data to your
configuration. (Use SysInternals REGMON while making the above change
to an XP desktop to figure out the reg keys).

SteveS
stevesATeyeDASHimagingDOTcom




Regards,

Sean Liming
www.sjjmicro.com / www.seanliming.com
XP Embedded Book Author - XP Embedded Advanced, XP Embedded Supplemental
Toolkit


I've built my target with two users. "administrator" and "user". User is
not an administrator. I don't want him to be able to mess with the system
too much BUT there are a couple of things he needs to be able to do.

firstly i want my user to be able to have XP Visual Styles on his desktop.

however this is not available as an option on the display control panel
Only
windows Classic is available.

When i'm logged on as the administrator i can select Windows XP Style for
my
appearance.

How do i get that option for my non administrator user.

Secondly my user needs to be able to set the date and time.

the user account automatically logs on so it would be more convenient to
set
these things up as the user rather than having to log off and log on as
administrator. I'm thinking especially about what happens in our
production
when new systems are being built and the disks are cloned from a re-sealed
master disk.

If i can get XP styles onto the user account prior to cloning that's not
such a big deal BUT the time setting thing is more important. Our
processor
board has no battery backup until it's on the system so they all start off
at
1st Jan 2004 which is not good for the data logging we do when our
application is running.
 
K

KM

Kevin,

There is certainly no such log unless some services logs their start time in the Event log (like IIS).

However, I'd recommend you looking at MS tool BootVis. It will help you analyzing various service boot time and other things
happening at your system boot. Search Google to find the BootVis downloads.

Btw, if waiting for a long time doesn't help and you still think it is a service start problem, it may be that one of the required
services in your system is set to start on-demand (manually). So I'd recommend you to check all the services there with the manual
start set.

--
=========
Regards,
KM
KM

I checked this morning.

The Themes service is set to Automatic...........

Is there a log file i can look at which tells me when the service actually
starts compared to when i log in, there's nothing in the event viewer.

Is it possible it does not start until a user logs in (by which time it's
too late). I've tried waiting for 5 minutes before logging on to see if that
helps but no use.

Thanks for your help


KM said:
Kevin,

Maybe "Themes" service state is set to on-demand? If so, change it to Automatic.

--
=========
Regards,
KM
Now it's getting even more freaky.

I've re-built my XPe system so that all the changes i previously made have
disappreared.

When i log on the FIRST time as User i've not got Luna (XP Visual Style
under Display/Appearence)

BUT if i just log off and back on again it's there.

In fact if a set the desktop to one of the XP Visual Styles and then
shutdown, after i log on the first time the desktop colour scheme is all
screwed up but if i just log off and on again then i get the XP-Visual Styles
colour scheme i chose.

So it can't be anything to do with permissions (i have not changed any).

My only thought is that something is not getting initialised (a service?)
until after i've logged in the first time after which i can use Visual Styles

Any help would be appreciated


:

i should have said. no i'm not using EWF.

strangely enough the registy entries are still there.

i'm in the middle of an experiment to remove the "User" account and then add
a new one to see if a new account inherits something that the old one did not
have.



:

Kevin,

You mean they are along with the registry entires?

Are you running the OS protected by EWF?

--
=========
Regards,
KM

OK so now i'm really confused.

i added the keys below to the registry (as administrator) logged off, logged
back on as user and the luna styles were there.

I shut down the system, turned it back on and they have gone again.



:

Thanks KM

That pointer put me on the right track.

the following keys are significant
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\system]
"NoVisualStyleChoice"=dword:00000000
"SetVisualStyle"="C:\WINDOWS\Resources\Themes\Luna\luna.msstyles"

You need both of them to get Visula Styles on all users.

Whats interesting is that these keys DONT exist on my XP-Pro system but
everyone has Visual Styles

However i don't care now i've got a fix that i can use to do what i need.

thanks for your help


:

Kevin,

Could it be tht we're just missing a load of registry settings for our
default user?


You may want to check out this policy for the default and created users on your runtime:
[HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System],"NoVisualStyleChoice"

--
=========
Regards,
KM

I always thought that users being unable to set the time was a
&!@!!XX$! decision.
However, I read in Raymond Chen's blog
(http://blogs.msdn.com/oldnewthing/) the reason why: If limited users
can set the time then they can fake out system event logs by changing
the time, doing something, and then setting it back. For example if
you wanted to "backdate" the system data logs, it would be easy to do
so.

I would recommend instead that if your systems are connected to the
internet you enable the internet time synchronization feature in the
time/date control panel. This allows the computer to automatically
get the time from public servers that exist for this purpose. In
addition to being configured through the time/date applet, there are
some simple registry keys available for this purpose:

Copy the following text into a text file, then name it "TimeSync.reg".
Double-click on the file to add data to the registry
Or the .reg file can be imported into component designer to create a
component. (Watch out for missing spaces in reg keys).


;---------- BEGIN TIMESYNC.REG -------------
Windows Registry Editor Version 5.00
;~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
;Enable Time Sync using default windows servers

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\W32Time\Parameters]
"Type"="NTP"
"LocalNTP"=dword:00000000

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\W32Time\TimeProviders\NTPClient]
"SpecialPollInterval"=dword:00015180

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\DateTime\Servers]
"1"="time.windows.com"
"2"="time.nist.gov"

;---------- End TIMESYNC.REG -------------

There probably is some way that you could force a synchronization to
occur at bootup, using a logon script or something...


Having said that, if you absolutely decide you must configure this
right you can do it through a local security policy. (Include component
"Software:: System:: Security:: Applications:: Security Settings
Editor" in your build)

Afte building with that component installed, open the Local Security
Policy Console (Start, run, C:\Windows\System32\secpol.msc) you will
find a number of interesting settings under the following branch:

Security Settings
Local Policies
User Rights Assignment
"Change the System Time"

Be very careful with these settings: if you set this or any of the
other properties to "Users" group, then it will deny access to
everyone else. You must specify all groups that need this right. My
setting for this policy is Administrators, Backup Operators, Power
Users, and Remote Desktop Users.

Finally, I know that some of the GUI components in the "Administrative
Tools" world have a lot of dependencies, and thus tend to "bloat" your
run time. If you are concerned about the size of your image, you
probably want to figure out the registry keys associated with this
policy, and just add the appropriate registry data to your
configuration. (Use SysInternals REGMON while making the above change
to an XP desktop to figure out the reg keys).

SteveS
stevesATeyeDASHimagingDOTcom




Regards,

Sean Liming
www.sjjmicro.com / www.seanliming.com
XP Embedded Book Author - XP Embedded Advanced, XP Embedded Supplemental
Toolkit


I've built my target with two users. "administrator" and "user". User is
not an administrator. I don't want him to be able to mess with the system
too much BUT there are a couple of things he needs to be able to do.

firstly i want my user to be able to have XP Visual Styles on his desktop.

however this is not available as an option on the display control panel
Only
windows Classic is available.

When i'm logged on as the administrator i can select Windows XP Style for
my
appearance.

How do i get that option for my non administrator user.

Secondly my user needs to be able to set the date and time.

the user account automatically logs on so it would be more convenient to
set
these things up as the user rather than having to log off and log on as
administrator. I'm thinking especially about what happens in our
production
when new systems are being built and the disks are cloned from a re-sealed
master disk.

If i can get XP styles onto the user account prior to cloning that's not
such a big deal BUT the time setting thing is more important. Our
processor
board has no battery backup until it's on the system so they all start off
at
1st Jan 2004 which is not good for the data logging we do when our
application is running.
 
G

Guest

I'll start a new thread on this.

Title will be "XP Visual Styles for Non Admin Users"

KM said:
Kevin,

There is certainly no such log unless some services logs their start time in the Event log (like IIS).

However, I'd recommend you looking at MS tool BootVis. It will help you analyzing various service boot time and other things
happening at your system boot. Search Google to find the BootVis downloads.

Btw, if waiting for a long time doesn't help and you still think it is a service start problem, it may be that one of the required
services in your system is set to start on-demand (manually). So I'd recommend you to check all the services there with the manual
start set.

--
=========
Regards,
KM
KM

I checked this morning.

The Themes service is set to Automatic...........

Is there a log file i can look at which tells me when the service actually
starts compared to when i log in, there's nothing in the event viewer.

Is it possible it does not start until a user logs in (by which time it's
too late). I've tried waiting for 5 minutes before logging on to see if that
helps but no use.

Thanks for your help


KM said:
Kevin,

Maybe "Themes" service state is set to on-demand? If so, change it to Automatic.

--
=========
Regards,
KM

Now it's getting even more freaky.

I've re-built my XPe system so that all the changes i previously made have
disappreared.

When i log on the FIRST time as User i've not got Luna (XP Visual Style
under Display/Appearence)

BUT if i just log off and back on again it's there.

In fact if a set the desktop to one of the XP Visual Styles and then
shutdown, after i log on the first time the desktop colour scheme is all
screwed up but if i just log off and on again then i get the XP-Visual Styles
colour scheme i chose.

So it can't be anything to do with permissions (i have not changed any).

My only thought is that something is not getting initialised (a service?)
until after i've logged in the first time after which i can use Visual Styles

Any help would be appreciated


:

i should have said. no i'm not using EWF.

strangely enough the registy entries are still there.

i'm in the middle of an experiment to remove the "User" account and then add
a new one to see if a new account inherits something that the old one did not
have.



:

Kevin,

You mean they are along with the registry entires?

Are you running the OS protected by EWF?

--
=========
Regards,
KM

OK so now i'm really confused.

i added the keys below to the registry (as administrator) logged off, logged
back on as user and the luna styles were there.

I shut down the system, turned it back on and they have gone again.



:

Thanks KM

That pointer put me on the right track.

the following keys are significant
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\system]
"NoVisualStyleChoice"=dword:00000000
"SetVisualStyle"="C:\WINDOWS\Resources\Themes\Luna\luna.msstyles"

You need both of them to get Visula Styles on all users.

Whats interesting is that these keys DONT exist on my XP-Pro system but
everyone has Visual Styles

However i don't care now i've got a fix that i can use to do what i need.

thanks for your help


:

Kevin,

Could it be tht we're just missing a load of registry settings for our
default user?


You may want to check out this policy for the default and created users on your runtime:
[HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System],"NoVisualStyleChoice"

--
=========
Regards,
KM

I always thought that users being unable to set the time was a
&!@!!XX$! decision.
However, I read in Raymond Chen's blog
(http://blogs.msdn.com/oldnewthing/) the reason why: If limited users
can set the time then they can fake out system event logs by changing
the time, doing something, and then setting it back. For example if
you wanted to "backdate" the system data logs, it would be easy to do
so.

I would recommend instead that if your systems are connected to the
internet you enable the internet time synchronization feature in the
time/date control panel. This allows the computer to automatically
get the time from public servers that exist for this purpose. In
addition to being configured through the time/date applet, there are
some simple registry keys available for this purpose:

Copy the following text into a text file, then name it "TimeSync.reg".
Double-click on the file to add data to the registry
Or the .reg file can be imported into component designer to create a
component. (Watch out for missing spaces in reg keys).


;---------- BEGIN TIMESYNC.REG -------------
Windows Registry Editor Version 5.00
;~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
;Enable Time Sync using default windows servers

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\W32Time\Parameters]
"Type"="NTP"
"LocalNTP"=dword:00000000

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\W32Time\TimeProviders\NTPClient]
"SpecialPollInterval"=dword:00015180

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\DateTime\Servers]
"1"="time.windows.com"
"2"="time.nist.gov"

;---------- End TIMESYNC.REG -------------

There probably is some way that you could force a synchronization to
occur at bootup, using a logon script or something...


Having said that, if you absolutely decide you must configure this
right you can do it through a local security policy. (Include component
"Software:: System:: Security:: Applications:: Security Settings
Editor" in your build)

Afte building with that component installed, open the Local Security
Policy Console (Start, run, C:\Windows\System32\secpol.msc) you will
find a number of interesting settings under the following branch:

Security Settings
Local Policies
User Rights Assignment
"Change the System Time"

Be very careful with these settings: if you set this or any of the
other properties to "Users" group, then it will deny access to
everyone else. You must specify all groups that need this right. My
setting for this policy is Administrators, Backup Operators, Power
Users, and Remote Desktop Users.

Finally, I know that some of the GUI components in the "Administrative
Tools" world have a lot of dependencies, and thus tend to "bloat" your
run time. If you are concerned about the size of your image, you
probably want to figure out the registry keys associated with this
policy, and just add the appropriate registry data to your
configuration. (Use SysInternals REGMON while making the above change
to an XP desktop to figure out the reg keys).

SteveS
stevesATeyeDASHimagingDOTcom




Regards,

Sean Liming
www.sjjmicro.com / www.seanliming.com
XP Embedded Book Author - XP Embedded Advanced, XP Embedded Supplemental
Toolkit


I've built my target with two users. "administrator" and "user". User is
not an administrator. I don't want him to be able to mess with the system
too much BUT there are a couple of things he needs to be able to do.

firstly i want my user to be able to have XP Visual Styles on his desktop.

however this is not available as an option on the display control panel
Only
windows Classic is available.

When i'm logged on as the administrator i can select Windows XP Style for
my
appearance.

How do i get that option for my non administrator user.

Secondly my user needs to be able to set the date and time.

the user account automatically logs on so it would be more convenient to
set
these things up as the user rather than having to log off and log on as
administrator. I'm thinking especially about what happens in our
production
when new systems are being built and the disks are cloned from a re-sealed
master disk.

If i can get XP styles onto the user account prior to cloning that's not
such a big deal BUT the time setting thing is more important. Our
processor
board has no battery backup until it's on the system so they all start off
at
1st Jan 2004 which is not good for the data logging we do when our
application is running.
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Top