PC Review


Reply
Thread Tools Rate Thread

Administrator vs limited account

 
 
PAUL SIMON
Guest
Posts: n/a
 
      16th Apr 2004
I am running a system that has XP Professional. I have my account which is
set up as an administrator account, and I have accounts for my kids that are
set up as "limited" accounts. When they play a game that wants to save data,
it basically tells them they can't and then exits. I suspect this is because
it is in the limited mode. Is there a way to "adjust" windows to allow them
to save their data from their game?

Thanks.... Paul


 
Reply With Quote
 
 
 
 
Jim
Guest
Posts: n/a
 
      16th Apr 2004
Hmm... I thought the limited account just prevented access to adminstrator
level privileges (e.g., setting up scheduled tasks, reconfiguring machine,
disk/partition management, program installation/removal, etc.). Seems odd
that mere "file access", read ot write, would be an issue. Maybe the issue
is *where* the game is trying to save? Perhaps the game was installed by
the administrator under another account, and it's now trying to save to
*that* administrators My Documents, which would be off limits to a limited
account. Can't the game be configured (menu Options?) to save to *their* My
Documents?!

HTH

Jim


"PAUL SIMON" <(E-Mail Removed)> wrote in message
news:hFWfc.10937$(E-Mail Removed)...
> I am running a system that has XP Professional. I have my account which is
> set up as an administrator account, and I have accounts for my kids that

are
> set up as "limited" accounts. When they play a game that wants to save

data,
> it basically tells them they can't and then exits. I suspect this is

because
> it is in the limited mode. Is there a way to "adjust" windows to allow

them
> to save their data from their game?
>
> Thanks.... Paul
>
>



 
Reply With Quote
 
bxb7668
Guest
Posts: n/a
 
      16th Apr 2004
From past experience, some programs not designed for XP limited
accounts write to the programs Program Files folder which may not have
been granted write access to anyone not administrator. They also often
write to the Registry to areas that only some with administrator
privilege can write. Sometime you can fix this while logged onto an
administrator privilege account by changing the permissions to allow
everyone to write to the appropriate folders and/or registry keys.
The hard part is to figure out which folders and keys.

"Jim" <(E-Mail Removed)> wrote in message
news:SeYfc.11231$Yf6.10846@fed1read07...
> Hmm... I thought the limited account just prevented access to

adminstrator
> level privileges (e.g., setting up scheduled tasks, reconfiguring

machine,
> disk/partition management, program installation/removal, etc.).

Seems odd
> that mere "file access", read ot write, would be an issue. Maybe

the issue
> is *where* the game is trying to save? Perhaps the game was

installed by
> the administrator under another account, and it's now trying to save

to
> *that* administrators My Documents, which would be off limits to a

limited
> account. Can't the game be configured (menu Options?) to save to

*their* My
> Documents?!
>
> HTH
>
> Jim
>
>
> "PAUL SIMON" <(E-Mail Removed)> wrote in message
> news:hFWfc.10937$(E-Mail Removed)...
> > I am running a system that has XP Professional. I have my account

which is
> > set up as an administrator account, and I have accounts for my

kids that
> are
> > set up as "limited" accounts. When they play a game that wants to

save
> data,
> > it basically tells them they can't and then exits. I suspect this

is
> because
> > it is in the limited mode. Is there a way to "adjust" windows to

allow
> them
> > to save their data from their game?
> >
> > Thanks.... Paul
> >
> >

>
>



 
Reply With Quote
 
Carrie Garth
Guest
Posts: n/a
 
      18th Apr 2004
> "PAUL SIMON" <(E-Mail Removed)> wrote in message
> news:hFWfc.10937$(E-Mail Removed)...
> I am running a system that has XP Professional. I have my account which is
> set up as an administrator account, and I have accounts for my kids that are
> set up as "limited" accounts. When they play a game that wants to save data,
> it basically tells them they can't and then exits. I suspect this is because
> it is in the limited mode. Is there a way to "adjust" windows to allow them
> to save their data from their game?


As others have mentioned, the problem is likely that the default permissions
given to members of the "limited" account (the Users group) are too stringent
for the "game that wants to save data". As such, it will not run successfully.

Some options are to:

- Contact the application developer to obtain the list of objects (files, folders
and/or registry keys) that need relaxed permissions and relax permissions on those
objects. For more information about how "To set, view, change, or remove file and
folder permissions", and how "To assign permissions to a registry key" see the
Help and Support Center topic by those titles.

- Allow users of such applications to be members of the Power Users group
and hope that this relaxes permissions enough. For more information about
the "Power Users" group see the Help and Support Center topics titled:
"Groups overview", "Default security settings", and "Privileges". For
information about how "To add a member to a group", see the Help and Support
Center topic by that title.

- Apply the predefined incremental security templates named compatws.inf
(Compatible) and hope that this relaxes permissions enough. For information
about "Predefined security templates" and how to "Apply a security template
to local policy", see the Help and Support Center topics by those title.

- Use the Sysinternals tools Filemon and Regmon to monitor the programs'
access to files, folders and registry keys. Then search Regmon for "ACCDENIED" and
Filemon for "FAILURE", and then relax permissions on those objects.

For more information about Regmon and Filemon see:

Sysinternals Freeware - Information for Windows NT and Windows 2000
http://www.sysinternals.com/ntw2k/utilities.shtml



 
Reply With Quote
 
cquirke (MVP Win9x)
Guest
Posts: n/a
 
      20th Apr 2004
On Sun, 18 Apr 2004 06:55:47 -0500, "Carrie Garth"
>> "PAUL SIMON" <(E-Mail Removed)> wrote in message


>> I am running a system that has XP Professional. I have my account which is
>> set up as an administrator account, and I have accounts for my kids that are
>> set up as "limited" accounts. When they play a game that wants to save data,
>> it basically tells them they can't and then exits. I suspect this is because
>> it is in the limited mode. Is there a way to "adjust" windows to allow them
>> to save their data from their game?


>As others have mentioned, the problem is likely that the default permissions
>given to members of the "limited" account (the Users group) are too stringent
>for the "game that wants to save data". As such, it will not run successfully.


>Some options are to:


Try installing the game to a path that is not nested within
"C:\Program Files", so that it has permission to write to its own
subtree - or avoid the problem (and some protection) by not using
NTFS, or install the game on a FATxx volume.

>- Contact the application developer to obtain the list of objects (files, folders
>and/or registry keys) that need relaxed permissions and relax permissions on those


>- Allow users of such applications to be members of the Power Users group
>and hope that this relaxes permissions enough.


>- Apply the predefined incremental security templates named compatws.inf
>(Compatible) and hope that this relaxes permissions enough.


>- Use the Sysinternals tools Filemon and Regmon to monitor the programs'
>access to files, folders and registry keys.




>-------------------- ----- ---- --- -- - - - -

Running Windows-based av to kill active malware is like striking
a match to see if what you are standing in is water or petrol.
>-------------------- ----- ---- --- -- - - - -

 
Reply With Quote
 
Walter Clayton
Guest
Posts: n/a
 
      20th Apr 2004
"cquirke (MVP Win9x)" <(E-Mail Removed)> wrote in message
news:(E-Mail Removed)...
> On Sun, 18 Apr 2004 06:55:47 -0500, "Carrie Garth"
> >> "PAUL SIMON" <(E-Mail Removed)> wrote in message

>
> >> I am running a system that has XP Professional. I have my account which

is
> >> set up as an administrator account, and I have accounts for my kids

that are
> >> set up as "limited" accounts. When they play a game that wants to save

data,
> >> it basically tells them they can't and then exits. I suspect this is

because
> >> it is in the limited mode. Is there a way to "adjust" windows to allow

them
> >> to save their data from their game?

>
> >As others have mentioned, the problem is likely that the default

permissions
> >given to members of the "limited" account (the Users group) are too

stringent
> >for the "game that wants to save data". As such, it will not run

successfully.
>
> >Some options are to:

>
> Try installing the game to a path that is not nested within
> "C:\Program Files", so that it has permission to write to its own
> subtree - or avoid the problem (and some protection) by not using
> NTFS, or install the game on a FATxx volume.


Recommending FAT is not good for numerous reasons. You ignore registry
permissions which happens regardless of the file structure as well.

Setting permissions on the specific directory is acceptable however.

--
Walter Clayton - MS MVP(WinXP)
Associate Expert
http://www.microsoft.com/windowsxp/expertzone
Any technology distinguishable from magic is insufficiently advanced.
http://www.dts-l.org


 
Reply With Quote
 
cquirke (MVP Win9x)
Guest
Posts: n/a
 
      21st Apr 2004
On Mon, 19 Apr 2004 23:24:02 -0400, "Walter Clayton"
>"cquirke (MVP Win9x)" <(E-Mail Removed)> wrote in message
>> On Sun, 18 Apr 2004 06:55:47 -0500, "Carrie Garth"
>> >> "PAUL SIMON" <(E-Mail Removed)> wrote in message


Paul Simon? The guy with the diamond heels?

>> >> I am running a system that has XP Professional. I have my account
>> >> set up as an administrator account, and I have accounts for my kids
>> >> set up as "limited" accounts. When they play a game that wants to save
>> >> it basically tells them they can't and then exits.


>> >> Is there a way to "adjust" windows to allow them to save ?


>> >Some options


....were snipt...

>> Try installing the game to a path that is not nested within
>> "C:\Program Files", so that it has permission to write to its own
>> subtree - or avoid the problem (and some protection) by not using
>> NTFS, or install the game on a FATxx volume.


>Recommending FAT is not good for numerous reasons. You ignore registry
>permissions which happens regardless of the file structure as well.


Does that apply if registry and C: are NTFS, but troublesome and
data-trivial games are installed on non-C: FATxx volumes?



>-------------------- ----- ---- --- -- - - - -

Running Windows-based av to kill active malware is like striking
a match to see if what you are standing in is water or petrol.
>-------------------- ----- ---- --- -- - - - -

 
Reply With Quote
 
Walter Clayton
Guest
Posts: n/a
 
      21st Apr 2004
"cquirke (MVP Win9x)" <(E-Mail Removed)> wrote in message
news:(E-Mail Removed)...
> On Mon, 19 Apr 2004 23:24:02 -0400, "Walter Clayton"
> >"cquirke (MVP Win9x)" <(E-Mail Removed)> wrote in message
> >> On Sun, 18 Apr 2004 06:55:47 -0500, "Carrie Garth"
> >> >> "PAUL SIMON" <(E-Mail Removed)> wrote in message

>
> Paul Simon? The guy with the diamond heels?


Hmmm. Didn't notice that before. Maybe.

>
> >> >> I am running a system that has XP Professional. I have my account
> >> >> set up as an administrator account, and I have accounts for my kids
> >> >> set up as "limited" accounts. When they play a game that wants to

save
> >> >> it basically tells them they can't and then exits.

>
> >> >> Is there a way to "adjust" windows to allow them to save ?

>
> >> >Some options

>
> ...were snipt...
>
> >> Try installing the game to a path that is not nested within
> >> "C:\Program Files", so that it has permission to write to its own
> >> subtree - or avoid the problem (and some protection) by not using
> >> NTFS, or install the game on a FATxx volume.

>
> >Recommending FAT is not good for numerous reasons. You ignore registry
> >permissions which happens regardless of the file structure as well.

>
> Does that apply if registry and C: are NTFS, but troublesome and
> data-trivial games are installed on non-C: FATxx volumes?


Yes. The HD structure has nothing to do with registry permissions.

--
Walter Clayton - MS MVP(WinXP)
Associate Expert
http://www.microsoft.com/windowsxp/expertzone
Any technology distinguishable from magic is insufficiently advanced.
http://www.dts-l.org


 
Reply With Quote
 
cquirke (MVP Win9x)
Guest
Posts: n/a
 
      21st Apr 2004
On Tue, 20 Apr 2004 23:15:48 -0400, "Walter Clayton"
>"cquirke (MVP Win9x)" <(E-Mail Removed)>
>> On Mon, 19 Apr 2004 23:24:02 -0400, "Walter Clayton"
>> >"cquirke (MVP Win9x)" <(E-Mail Removed)>


>> >> Try installing the game to a path that is not nested within
>> >> "C:\Program Files", so that it has permission to write to its own
>> >> subtree - or avoid the problem (and some protection) by not using
>> >> NTFS, or install the game on a FATxx volume.

>>
>> >Recommending FAT is not good for numerous reasons. You ignore registry
>> >permissions which happens regardless of the file structure as well.

>>
>> Does that apply if registry and C: are NTFS, but troublesome and
>> data-trivial games are installed on non-C: FATxx volumes?

>
>Yes. The HD structure has nothing to do with registry permissions.


So it doesn't matter whether I suggest FATxx or NTFS, the story with
registry permissions (rights to update registry keys) would be the
same. Ah, but that's what you meant when you said "you ignore
registry permissions"; IOW my advice would make no difference to that,
positively or negatively. True, but I thought not being able to save
from a game would be more file-level rather than registry.



>------------ ----- ---- --- -- - - - -

Our senses are our UI to reality
>------------ ----- ---- --- -- - - - -

 
Reply With Quote
 
Walter Clayton
Guest
Posts: n/a
 
      22nd Apr 2004
"cquirke (MVP Win9x)" <(E-Mail Removed)> wrote in message
news:(E-Mail Removed)...
> On Tue, 20 Apr 2004 23:15:48 -0400, "Walter Clayton"
> >"cquirke (MVP Win9x)" <(E-Mail Removed)>
> >> On Mon, 19 Apr 2004 23:24:02 -0400, "Walter Clayton"
> >> >"cquirke (MVP Win9x)" <(E-Mail Removed)>

>
> >> >> Try installing the game to a path that is not nested within
> >> >> "C:\Program Files", so that it has permission to write to its own
> >> >> subtree - or avoid the problem (and some protection) by not using
> >> >> NTFS, or install the game on a FATxx volume.
> >>
> >> >Recommending FAT is not good for numerous reasons. You ignore registry
> >> >permissions which happens regardless of the file structure as well.
> >>
> >> Does that apply if registry and C: are NTFS, but troublesome and
> >> data-trivial games are installed on non-C: FATxx volumes?

> >
> >Yes. The HD structure has nothing to do with registry permissions.

>
> So it doesn't matter whether I suggest FATxx or NTFS, the story with
> registry permissions (rights to update registry keys) would be the
> same. Ah, but that's what you meant when you said "you ignore
> registry permissions"; IOW my advice would make no difference to that,
> positively or negatively. True, but I thought not being able to save
> from a game would be more file-level rather than registry.


Generally it is on HD permission, but not always. If the app/game is doing
less than wise things with protected parts of the registry then there is
nothing that can be done with regard the HD structure permissions or lack
thereof. One issue is whether or not the app is saving state
information/pointers in the registry and exactly where.

In a nutshell there are a ton of unsafe apps out there since they were
developed for the 9x platform and the vendors were never forced to program
safely. Unsafe being defined as wanting to alter either parts of the
registry or parts of the HD structure that an application has no business
touching, although there are other things that are considered unsafe in
modern context. These same vendors never had a version of the software/game
that would run correctly on any NT kernel but since the target audience at
the time, for the most part, was running a wide open unprotected platform,
they didn't care. And since an admin class user is running mostly carte
blanc, they still don't care since the XP default is multiple admin class
users which is an unsafe mode of operation..

--
Walter Clayton - MS MVP(WinXP)
Associate Expert
http://www.microsoft.com/windowsxp/expertzone
Any technology distinguishable from magic is insufficiently advanced.
http://www.dts-l.org



 
Reply With Quote
 
 
 
Reply

Thread Tools
Rate This Thread
Rate This Thread:

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
NEED HELP--PLEASE HELP ME--administrator account reduced to limited user, need to reset account efreak Windows XP General 1 9th Jun 2006 09:02 PM
XP Remote Desktop - Limited Account vs Administrator Account Malice Windows XP Work Remotely 7 31st Mar 2005 05:11 PM
How to set Administrator account, and how to set limited account for other User? cubus Windows XP General 4 3rd Feb 2005 12:01 PM
Administrator vs limited account PAUL SIMON Windows XP General 11 22nd Apr 2004 02:01 PM
administrator account type changed to limited account =?Utf-8?B?c2hhcmlh?= Windows XP New Users 1 27th Feb 2004 11:12 PM


Features
 

Advertising
 

Newsgroups
 


All times are GMT +1. The time now is 03:33 AM.