Run filemon as a user

[edpatterson]

Greetings,

I am attempting to get an application to run as a 'user' as opposed to a 'power user' or 'administrator'. I logged everything using regmon and filemon when the app is run as administrator. I granted permissions according to the results however the app still refuses to run.

I tried running filemon & regmon as a user and was informed that the users needed Load Driver and Debug Program permissions. It appears that my group polict object is not enough.

Computer Configuration|Security Settings|Local Policies/User Rights Assignment:
Debug programs->username
Load and unload device drivers -> username

The workstation of the user is in an OU that the policy is applied to.

Ideas?

Ed

 

[porkchopexpress]

You could try using RunAsUser.

http://www.palmersoft.co.uk/software/runasuser.asp

 

[BenChristian]

You can just use the standard RUNAS to run regmon and filemon.

RUNAS /user:machinename\administrator regmon.exe

Even though you are starting regmon with under a different user account, the applications that you are monitoring are running under the standard user account. This will allow you to see the "access denied" messages for the registry keys and files/folders.

Ben.

http://www.benchristian.com