Application needs admin powers to run

[psasu]

The networks consists of one domain with 2 domain controllers running win2k server sp4, and all the workstations runs win2k professional and only 1 labtop running winxp pro.
A user, before demotion, was a member of domain admin group .The company new policy demoted this user as domain user
After demotion, he cant run certain specific applicaions and the error msg states that the user needs admin privileges
Since the company wants all users to be domain users with the exception of the Administrator and the owner of the company, how can I configure the permissions to enable users run those local applications on their desktop

 

[NortonES2]

Can try making the user a member of the local Admin group on their workstation.

-------------------------------

If it doesn't leak oil it must be empty!!

 

[longhair]

psasu,
make sure they have read/write access to directories that the program(s) need. also, have found at times that its just a matter of making the user an admin, running the program once then demoting them again. i believe that this is because when the program was initially installed it wrote all registry entries for admin, never the user. once the user has the entries you should hopefully hav eno problems.

hth
longhair.

 

[gensan]

Another option will be to copy the profile of the administrator to the user.

 

[dholbrook]

Critical question, where are the applications in question, on the server, or on the local system?

If they are on a local system, you can add the users into the local admin group on the local systems. otherwise the application was probably not installed for all users to use and will need to be re-installed as an all-user appication, not user specific owned.

If the application is on the server, then there is a permission problem on the server in the registry. This is probably part of the recent serurity updates, which have changed the access permission to a portion of the registry where data needs to be written and updated as the application runs, restricting access to admin and system only. Before going down that road, let us all know where these apps reside.

HTH,

David

 

[psasu]

David, that application is local.
To be specific is ad aware 6.0.The application can be run only when I log on as admin but when the user log on to his profile, it gives that error message
For other applications like the quickooks which the data is on the server but the applicaion local to the users, I created a global security group with users in the accounts dept as the members and then added that group to the local power users group on the win2k computers and is working ok
I will try same method for the adware and see the results or do you have somethng in mind

 

[dholbrook]

Since AdAware (and SpyBot S&D) makes registry changes it need to have local admin permission (especially if youhave put the security access patches in place), so the solution is to add the user to the local admin group on his own system. He is not a domain admin, but will be able to run these apps that need access to the registry to fix the problems, delete the trojan entries, etc.

By the way AdAware 6.181 should be used, not 6.0, and it only finds part of the problems. I recommend running CWSHREDDER, then SPYBOT S&D, then AdAware, in that order.

HTH,

David