'Standard User Rights'?

[Robert]

I'm trying to run Quickbooks Pro on a workstation on a
domain. The issue is that a user, in order to run the
program, has to be an administrator. If they are not an
administrator, the user gets the error message "Your user
account for Windows was created with Restricted access to
system resources. This will prevent QuickBooks from
operating properly. Please contact your system
administrator and ask him or her to grant you Standard
user rights."...

I've called their support to try to find out what rights
the program needs and can't get them to support it.

Any ideas would be appreciated...

Thanks...

 

[Laura E. Hunter \(MVP\)]

Try applying the 'compatws.inf' security template to the workstation in
question. It might relax security on the Registry keys that QB needs to
run, without giving away the candy store in terms of local user rights:

http://www.microsoft.com/windows200...ows2000/en/server/help/sag_SCEdefaultpols.htm

 

[Herb Martin]

Laura is correct, compatXX.inf is likely to be ONE solution.

Another likely solution is making the user a Power User.

From the USER'S point of view the two are virtually equivalent,
but they have slightly different convenience and security implications.

BTW, the problem lies with a badly designed app.

 

[Cary Shultz [A.D. MVP]]

Robert,

As both Herb and Laura have suggested, you are facing two things: a company
that does not support their product very well and a poorly written program.

My experience with Intuit a couple of years ago was less than encouraging
( I would rather deal with Dell! ). They can be extremely difficult. But,
I guess some of that depends on the person with whom you speak. Some of
those poor souls in Tech Support just get hammered. We do have to take that
into consideration. I mean, we have all been in some Tech Support capacity
at one time or another ( and probably still are! ). Still, in my limited
experience dealing with them can be frustrating.

A lot of applications are written more with WIN98 in mind. With WINNT and
WIN2000 and WINXP there are some obvious changes as far as to what the
logged on user has access and the level of permissions ( to the registry,
for example ). It is either too difficult or too costly to revamp these
applications, apparently.

I work with a few law firms and insurance companies and the majority of the
applications that they use 'require' that the logged on user be a member of
the local Administrators group. This is something that I really do not
like. You can call and call and call - hoping to get someone there who
really knows the application and can quickly give you the low down. That
usually does not happen. So, you have to spend a lot of time using regmon
and filemon from http://www.sysinternals.com to figure out exactly who is
being denied access to what and where! That can be a bit daunting. It is
usually a whole lot faster ( read: less expensive to the client ) to simply
grant the domain user account membership to the computer's local
Adminsitrators group. This is a horrible statement but true!

HTH,

Cary