Software Restriction Policies

[abhayjoukani]

Dear subscribers,

i have a problem with a application which need admin rights on a
computer to work successfully! what i need to know is is there any way
that the particular program has admin rights no matter which user has
logged on! i tried something with Software restriction Policies but the
user account policy dose not have admin rights so it doesn't work! if
yes could you plz guide me through

thanks,
abhay.

 

[Steven L Umbach]

You can not use Software Restriction Polices to elevate users access to an
application. What you can do is to try and modify folder and possibly
registry permissions for the application so that it can work for a regular
user. Does it work when the user is a power user? If so most certainly
permissions can be changed so that the regular user can use the application.
What is the application? Maybe someone here has experience with it. The
first place to look to modify permissions is to the application folder in
program files where you can give "users" read/list/execute/write/modify
permissions. After that look for a subfolder for the application in the
program files\common files folder and in the documents and settings\all
users\application data folder. In the registry look under HKLM\software for
the application key to give users more permissions if need be. To further
troubleshoot you can use the free tools called filemon and regmon from
SysInternals, logon as regular user, use runas to start filemon as
administrator, start the application, as soon as it fails stop logging in
filemon and look for access denied entries in it's log, adjust permissions
where access is denied and try again. You may need to do the same with
regmon. --- Steve

http://support.microsoft.com/default.aspx?scid=kb;en-us;308418 --- NTFS
folder permissions.

 

[abhayjoukani]

first of all thanks Steve for your time and reply,

NOW for your question,
this is a custom .net application made by me. which basically uses
system resources programmatically which only administrators can access.

HOW the program works
now i plan to install this software in network environment and the
program should automatically start for all users on the local computer.
now when the program tries to use the admin resources in say like
"Guest" account it doesn't seem to work i have tried giving the
application "full trust" with ".net configuration wizard" &+&
"unrestricted access" with the "Software Restriction Policies" but
still it doesn't seem to work for me

Another solution which i can try is
.. making it a service so that i starts automatically for all users
with the rights of local admin <-- but i am looking for a solution
which is other that this! can u help me out plz

PS :- some1 also told me to try something with group policies as im a
programmer i dont know much about networks and administration so if u
could help me out

thanks
abhay

 

[Steven L Umbach]

I am not a developer or programmer and can not help much further. You may
also want to post in the appropriate developer newsgroups for further help.
Group Policies may help in that you can use Group Policies [or more
specifically security policy] to give users additional user rights
[privileges] such as logon as a service but you really need to be careful
not needing regular logon users to have elevated rights/permissions as that
will reduce system security and make you unpopular [to be fair you indicate
a concern about system security]. You can use secpol.msc to see and manage
user rights under security settings/local policies/user rights. --- Steve