Hello Jeff,
Thank you for your reply.
So...is there absolutely no way to open up the hardware permissions for a
COM port? what are my options.
You could try to search if certain registry key could open up the hardware
permissions. You could try to use certain third party to monitor the
registery for example ¡°registry monitor¡±. However you will get too much
information from this operation to deal with.
can I just make the program run with elevated security by means of a GPO
or script?
You may try the Runas command.
To star an aplication by using the runas command,use the following syntax:
Runas/user:UserAccountName program
For example: runas/user:
[email protected] mmc
c:\winnt\system32\dsa.msc
Use of the runas command is not limited to Administrator accounts.
If the runas command fails, the Secondary Logon service may not be running.
For more information you may browse the following website:
HOW TO: Enable and Use the "Run As" Command When Running Programs in Windows
http://support.microsoft.com/default.aspx?scid=kb;en-us;294676
and
you may search the Windows help topic ¡°runas¡±.
I hope the information proves helpful!
If anything is unclear or you have any other related information, please
feel free to let me know. I am glad to be of assistance.
Thanks and regards,
Alex Zhang
Microsoft Partner Online Support
Get Secure! -
www.microsoft.com/security
=====================================================
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
=====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.
--------------------
| From: "Jeff Smyrski" <
[email protected]_SPAM>
| References: <
[email protected]>
<
[email protected]>
| Subject: Re: COM PORT Permissions
| Date: Mon, 8 Mar 2004 08:47:35 -0500
| Lines: 119
| X-Priority: 3
| X-MSMail-Priority: Normal
| X-Newsreader: Microsoft Outlook Express 6.00.2800.1158
| X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1165
| Message-ID: <
[email protected]>
| Newsgroups: microsoft.public.windowsxp.security_admin
| NNTP-Posting-Host: bankofutica-gate-line-r.bankofutica.com 216.230.225.242
| Path: cpmsftngxa06.phx.gbl!TK2MSFTNGP08.phx.gbl!TK2MSFTNGP09.phx.gbl
| Xref: cpmsftngxa06.phx.gbl
microsoft.public.windowsxp.security_admin:116306
| X-Tomcat-NG: microsoft.public.windowsxp.security_admin
|
| Evidently the software company's solution for such an issue is to make
| everyone Power Users (locally) however since the users do not log in
locally
| and are part of an AD domain with Group Policies in place to protect the
| machine (ie downloading programs from internet and installing at the very
| least hacking tools, and virus'), this does not matter nor does it work.
So
| the next solution is to make the user on the domain the equivalent of a
| Power User so that the software works...(yeah Right I said!) why don't I
| just make everyone administrators and have no security at all. So, it
came
| to my attention that the program attempts to make COM port setting
changes,
| kind of like overriding the configured com port settings, and it seems
that
| this operation is what is taking a long time to time out and then the
| program just prints.
|
| So...is there absolutely no way to open up the hardware permissions for a
| COM port? what are my options.
|
| TO answer your questions, it seems to only be this program, a printer
trace
| with in the program shows that it looks to be attempting to change the COM
| settings, almost like initializing the port all over again.
|
| My other question might be easier to solve...can I just make the program
run
| with elevated security by means of a GPO or script?
|
| Thanks,
| Jeff
|
| | > Hello Jeff,
| >
| > Thank you for posting here.
| >
| > I understand that you have an issue about print with com port.
| > To understand the issue better, I'd like to confirm the following
| > information with you:
| > 1. Does this issue occur on all the computers or only one computer?
| > 2. Does this issue occur on all the application software or only certain
| > software?
| > 3. You could use some Windows application software such as Microsoft
Word,
| > notepad to print with com port. Does the issue occur?
| >
| > I'd like to explain that in windows operating system it is recommended
| that
| > all program use the windows printer driver to finish the print function
| > rather than access the com port directly inside program. If we can
ensure
| > that issue only occurs on that certain program, I suggest that you
contact
| > with the vendor to upgrade the software. Since accessing hardware also
| need
| > special privilege besides registry/files permission, changing permission
| of
| > the registry is not able to let the user make com port changes.
| >
| > If anything is unclear or you have any other related information, please
| > feel free to let me know. I am glad to be of assistance.
| >
| > I look forward to your reply.
| >
| > Thanks and regards,
| > Alex Zhang
| > Microsoft Partner Online Support
| > Get Secure! -
www.microsoft.com/security
| > =====================================================
| > When responding to posts, please "Reply to Group" via your newsreader so
| > that others may learn and benefit from your issue.
| > =====================================================
| > This posting is provided "AS IS" with no warranties, and confers no
| rights.
| > --------------------
| > | Content-Class: urn:content-classes:message
| > | From: "Jeff Smyrski" <
[email protected]>
| > | Sender: "Jeff Smyrski" <
[email protected]>
| > | Subject: COM PORT Permissions
| > | Date: Fri, 5 Mar 2004 13:43:13 -0800
| > | Lines: 26
| > | Message-ID: <
[email protected]>
| > | MIME-Version: 1.0
| > | Content-Type: text/plain;
| > | charset="iso-8859-1"
| > | Content-Transfer-Encoding: 7bit
| > | X-Newsreader: Microsoft CDO for Windows 2000
| > | X-MimeOLE: Produced By Microsoft MimeOLE V5.50.4910.0300
| > | Thread-Index: AcQC+tyYmE/X/+NmTGyGMj4XZdMP7A==
| > | Newsgroups: microsoft.public.windowsxp.security_admin
| > | Path: cpmsftngxa06.phx.gbl
| > | Xref: cpmsftngxa06.phx.gbl
| > microsoft.public.windowsxp.security_admin:115976
| > | NNTP-Posting-Host: tk2msftngxa08.phx.gbl 10.40.1.160
| > | X-Tomcat-NG: microsoft.public.windowsxp.security_admin
| > |
| > | I have a program that seems to be resetting the serial
| > | port settings (ie Baud/Parity/Stop bits etc etc) after
| > | each transaction that it performs. For a domain
| > | administrator, this works just fine, and all is well.
| > | When a non-administrator logs into the machine, the
| > | initial launch of the program works fine, and the first
| > | transaction goes right thru to the receipt printer (like
| > | one you see at a store). However it seems that after the
| > | initial transaction, the software wants to reset or
| > | reconfigure the COM PORT settings, and does this each
| > | time it prints a receipt. However, since the user is a
| > | non-administrator, it takes a really long time, 3 minutes
| > | to basically time out, and then just prints to the
| > | printer anyway.
| > |
| > | My question is this, is there a place where I can open up
| > | the security for this or all COM ports, and just let the
| > | user make changes with out giving them Power User or
| > | Admin rights, that I do not want to give them.
| > |
| > | I assume that the settings for these are stored in the
| > | registry so I think I could just give them access to the
| > | specific registry keys without giving them all of the
| > | keys...any ideas?
| > |
| > | Jeff Smyrski
| > |
| >
|
|
|