user settings

[Silvano]

i am running win2kpro i have one user that I would like to have "restricted user" setting; as restricted user, he is not able to install programs or do any damaging changes; and here is the problem: when he tries to run certain program it gets
application error: exception EOleError in module studio.exe at 00080844. Error creatin system registry entry

I can undertand that, as a restricted user he can not change registry, and the program is apperantly trying to verify something in the registry;

ok, is there any way around this? can I keep him as restricted user and do something to allow him use this particular program?

thanks in advance

Sylvano
dsylvano@hotmail.com

"every and each day when I learn something new is a small victory..."

 

[mcconmw]

Identify the specific registy key the app needs to write to and then use regedt32 to grant the user or all users read\write permissions to that key only.

 

[Silvano]

thanks mcconmw, I would apriciate if you can give me some leads or tips on

1. HOW can I identify the registry key the app is trying to write to, and
2. once in the regedt32, what key sould I modify to grant that user permission to write to that key only

if you know where is a white paper or some other material on this, will do

thanks Sylvano
dsylvano@hotmail.com

"every and each day when I learn something new is a small victory..."

 

[mcconmw]

The first step is to go to HKeyLocalMachine\Software and find the key for the software. It is usually either the manufacturers name or the software's name. Highlight this key and then click on security on the toolbar at the top of the window. Click permissions and then either add the specific user or just increase the existing group "users" rights. This will take care of the problem most of the time. However there are some programs that write to other areas of the registry. If you try the first part and it still doesn't work it gets more complicated because you will have to find and use a program that can identify exactly which keys are being accessed by a program. Someone posted a link recently on one of the forums for one of these programs but I don't remember which forum or the name of the tool. Personally, unless security is a major concern, if the first step doesn't help, I would use secedit.exe along with the compatws.inf to roll back the security to something more equivalent to NT 4.0 where most apps will function properly again.

 

[ss702sh]

I do not sell, nor am I suggesting you buy, but I use "regmon" & "filemon" from SysInternals(Winternals). It does exactly what you need done. I am a LAN/WAN Admin for 1000 user network. New apps can drive you crazy, but with the right tools, we push past these little irritations. Good Luck.