Disclaimer: I don't know anything about expressIt2000. Their support might
be able to help you more.
The root problem is that this software is trying to create/modify some
object(s) (file or registry are likely) that the administrator can access
but a user cannot. I have no idea what the app is trying to do; what it's
trying to touch. If you knew what things their installer (and later
probably the app itself) was trying to change, granting the user access to
those objects would probably be the most painless way to go. Then the users
that won't be installing any more programs will be able to run as plain ol'
users.
1st problem: Find out what the app is trying to access.
Try to contact the vendor. Maybe they have a list of things they need to
play with to run. If you can't get any support/info from the vendor and you
feel like experimenting, there are tools to monitor registry and file
operations. You might want to check out regmon/filemon from
sysinternals.com or something similar.
2nd problem: Allow users access to those files/reg keys
You *could* create a group and set the security descriptors on the objects
from #1 to allow that group whatever access they need. You could do this
individually for each user instead. Depending on circumstances, it might
make sense to just do this with authenticated users or somesuch.
That's really all I can offer. I hope the folks who make expressIt2000 can
help.
--
Drew Cooper [MSFT]
This posting is provided "AS IS" with no warranties, and confers no rights.
Because my boss do not want the local users to install
any new programs and the only program are having problem
with, is a program call expressIt 2000 (a email program)
if I can get this program to work I will be happy.
can you help me?
-----Original Message-----
Caveat: a power user can easily become an administrator. And any
administrator has complete control over the machine.
Yes, you could create your own local security groups, but that might not
necessarily get you what you want. Why not add the users that need to be
administrators to the local administrator group?
--
Drew Cooper [MSFT]
This posting is provided "AS IS" with no warranties, and confers no rights.
Can I create my own local security groups?
I have local users that need to run a legacy program
requires administrator or power user rights, some of the
users will be installing programs and some will not
install programs. So, can this be done???
.
