keyongtech


  keyongtech > windowsxp.* > windowsxp.security_admin > 11/2004

 #1  
11-26-04, 03:29 AM
Osmosis
I can't seem to share certain programs among the limited users on my
computer. I am running XP Home with Service Pack 2. Examples of problems
programs are Quicken, Palm Desktop, and Fidelity Active Trader Pro. I don't
have any problem with Microsoft Office, Adobe Reader and various others. Any
suggestions?
 #2  
11-26-04, 03:37 AM
Carey Frisch [MVP]
Many software programs use installation routines that are not "Multi-User aware".
Therein lies the problem. Try placing a shortcut to the program in the All Users account
(C:\Documents and Settings\All Users\Start Menu\Programs). This should make the
program available to all users.
 #3  
11-26-04, 04:28 PM
Bruce Chambers
Osmosis wrote:
> I can't seem to share certain programs among the limited users on my
> computer. I am running XP Home with Service Pack 2. Examples of problems
> programs are Quicken, Palm Desktop, and Fidelity Active Trader Pro. I don't
> have any problem with Microsoft Office, Adobe Reader and various others. Any
> suggestions?
>


This is quite common if the software was designed for Win9x/Me, or
if it was intended for WinNT/2K/XP, but was improperly designed. Quite
simply, the installation routine for this application doesn't "know"
how to handle individual user profiles, or the application tries to
make changes to "off-limits" sections of the registry. Quite often,
you can make this software available to other users by _copying_ the
Start Menu folder and Desktop folder shortcuts from the user profile
from which the software was installed in the corresponding folders in
the user profile(s) in which you'd like the software to be accessible.
If the application is something that can/should be made available to
all current and future users, copying the shortcuts into the
corresponding locations of the All Users profile will do the trick.

For some obscure reason, game developers in particular seem to not
understand WinXP's file security paradigm, and require even limited
users to have unnecessarily high privileges to protected systems
folders. For example, saved games are often stored in a sub-folder
under the game's folder within C:\Program Files - a place where no
inexperienced or limited user should have write permissions.

NOTE: This may not work if the software requires access to parts
of the hard drive and/or registry that are not normally accessible to
regular users. (This won't occur if the application was properly
written.) If this does prove to be the case, however, you're left
with two options: Either grant the necessary users appropriate higher
access privileges (either as Power Users or local administrators), or
replace the application with one that was properly designed
specifically for WinNT/2K/XP.

Some Programs Do Not Work If You Log On from Limited Account
http://support.microsoft.com/default...;EN-US;q307091

Additionally, here are a couple of tips suggested, in a reply to a
different post, by MS-MVP Kent W. England:

"If your game or application works with admin accounts, but not with
limited accounts, you can fix it to allow limited users to access the
program files folder with "change" capability rather than "read" which
is the default.

C:\>cacls "Program Files\appfolder" /e /t /p users:c

where "appfolder" is the folder where the application is installed.

If you wish to undo these changes, then run

C:\>cacls "Program Files\appfolder" /e /t /p users:r

If you still have a problem with running the program or saving
settings on limited accounts, you may need to change permissions on
the registry keys. Run regedit.exe and go to HKLM\Software\vendor\app,
where "vendor\app" is the key that the software vendor used for your
specific program. Change the permissions on this key to allow Users
full control."
Similar Threads
Granting Mailbox Permission

Hi, This feature was in E5.5 that a mailbox can be assigned permission to mulitple users including users that are on another trusted domain/forest. Is this available in...

Granting Folder Permission

I have a network of 20 computers with three workgroups. One workgroup (three computers) would like to have shared folers within the workgroup that are NOT available to...

Granting permission

I am trying to fix a permission issue, we have a user who connects to a DB through an AD group. when she tries to create a proc she gets an error stating that... Server: Msg...

Granting permission

SQL2K Hellow Experts! Is there a stored proc out there to grant a user EXEC permission on all stored proc on a certain database? Maybe something like...

granting permission

Want to grant permission for multiple tables to a user or role. is there a way to do this with transact-SQL. Please help!!!!! Thanks. A.S


All times are GMT. The time now is 07:26 PM. | Privacy Policy