Apllication Permissions

[John]

I'm not sure this is the right forum for this, but here
goes.

Say I have an application like MS Publisher, or Quickbooks
Pro.. they both seem to require administrator type
privaledges to run. However, I would like the computers to
be logged on as just domain users, and nothing else.

Is there a way to give permissions to just certain
programs so I don't end up making people power users?

 

[Steven L Umbach]

Contact the publisher and tell them that you need to know what ntfs and registry
permissions need to be changed in order for this to happen. If they act stupid and
can not help you can try to roll your own permission changes. You will have to first
download filemon and regmon from Sysinternals at the link below.

http://www.sysinternals.com/ntw2k/source/filemon.shtml

Then logon to a domain computer as regular user and run either filemon or regmon
using runas just before you try to run the application. Then view the log and look
for where there are "access denied" entries to a file. Change permissions for users
to allow read/list/execute or whatever is necessary, document the change, and repeat
the process until no more access denied permissions are found. You will have to do
the same for regmon, possibly before you finish with filemon if access stalls in the
process even though user apparently has ntfs permissions. This process can be tedious
but may have had success in finding where ntfs and registry permissions need to be
changed to allow regular users to run an application. --- Steve

http://support.microsoft.com/default.aspx?scid=kb;en-us;294676

 

[Cary Shultz [A.D. MVP]]

John,

Steven is giving you the perfect answer to your question. It might be a bit
time consuming is Intuit can not tell you what you need to know but you will
learn a whole bunch about both applications.

Please remember to post back the results so that others can benefit...

Cary

 

[John]

I'll do what has to be done to secure my computers against
users. I'll post my findings, but it might be a bit.

-john