Win XP Prof Limited Account

[Victor]

Hello,
Would like to know how I can grant a program
administrative rights to run under a limited account. I
dont mean using the run as command but to give that
program administrative rights all the time. I have a user
on limited account, and when the program is run it does
not have the permission. I want to be able to allow it to
run in administrative mode from the limited account
automatically.

Thankyou in advance

 

[Roger Abell]

That is not how things happen.
An app starts in an account (the one that launces it)
and acquired the security context of that account.
If launched in a non-admin security context it will
only be able to access what is allowed to that context.
This solution is to grant that account the permissions
needed to run the application, for example, Change on
the folder where the app is installed is often the issue.

 

[Rob]

-----Original Message-----
That is not how things happen.
An app starts in an account (the one that launces it)
and acquired the security context of that account.
If launched in a non-admin security context it will
only be able to access what is allowed to that context.
This solution is to grant that account the permissions
needed to run the application, for example, Change on
the folder where the app is installed is often the issue.

--
Roger Abell
Microsoft MVP (Windows Server System: Security)
MCSE (W2k3,W2k,Nt4) MCDBA



.

I have basically the same problem. I noticed that programs
that write to an .ini or .dat file each time a program is
started fail if the user doesn't have admin rights. I also
noticed that the dir "\Program Files" has a "R" attribute.
and is owned by the admin account that installed it. Any
help is appreciated.

 

[Roger Abell]

The first thing to do is check with the software maker.

Usually a few cacls commands issued by an admin
to grant looser permissions to the Users group cures
things.
cacls "c:\program files\app install dir" /t /e /g Users:C
or sub the folder path with full pathname for the .ini, etc.

Sometimes one also needs to loosen permissions in the
registry, or find well hidden filesystem locations.
For these regmon and filemon free utilities from
www.sysinternals.com can be very useful (once you
learn how to control their scope).

I usually also recommend advising the vendor that made
the software that Windows certified is something that I do
take into account in future software purchasing choices.