[THIN] Re: Classes user rights
- From: Frank Monroe <Frank.Monroe@xxxxxxxxxxx>
- To: "'thin@xxxxxxxxxxxxx'" <thin@xxxxxxxxxxxxx>
- Date: Fri, 2 May 2003 17:09:53 -0400
Actually,
All you really need is an XP or Windows 2000 workstation with a non power or
admin user to catch this problem. The ACL's are the same terminal serer or
not.
-----Original Message-----
From: Rob Beekmans [mailto:robbeekmans@xxxxxxxxxxxxx]
Sent: Friday, May 02, 2003 4:45 PM
To: thin@xxxxxxxxxxxxx
Subject: [THIN] Re: Classes user rights
I agree with all of you except that there are a few but's in my story.
1. I'm a hired consultant....they don't have any IT members....it's all =
done
by us...that's why I told them for 3 motnhs not to do it and let the
application vendor sort out there own problem and fix their app.=20
2. 1/2 decent ws is not found there, it's a full thin client =
environment.
3. will have to fight about any costs for this
4. will have to hire the consultant from the app for installing it on a =
test
env.=20
I'm gone look at my options and decide how to act....
Thanks for all the help.....=20
Grx
Rob
-----Oorspronkelijk bericht-----
Van: thin-bounce@xxxxxxxxxxxxx [mailto:thin-bounce@xxxxxxxxxxxxx] Namens =
M
Verzonden: vrijdag 2 mei 2003 22:15
Aan: thin@xxxxxxxxxxxxx
Onderwerp: [THIN] Re: Classes user rights
Well u cant escape from this and i cant see why you should want to.... =
:=AC)
Get any 1/2 decent old workstation and install Win2k with Terminal =
Services
on it Test the app and run regmon/filemon on that box.
I find that special access is normally all thats required and not full
control. Special Access =3D read values + set value +create subkey
This should take a day at the most.
regards
----- Original Message -----
From: "Rob Beekmans" <robbeekmans@xxxxxxxxxxxxx>
To: <thin@xxxxxxxxxxxxx>
Sent: Friday, May 02, 2003 8:44 PM
Subject: [THIN] Re: Classes user rights
>
> The app is DBS, some client system for a health care institute. I=20
> tried that...seems they need full control on a lot of keys.....=20
> Problem is they don't really know themselves....problem is also I'm=20
> the =3D man in the middle..
> The app is needed, the users are waiting, the management is pushing, =
and =3D
> I'm
> only responsible for the network..LOL
>
> But let's look at the bright side, I warned them for 3 months now, so=20
> if =3D the servers go down....they can't say they didn't know.....
>
> I'm gone sit and wait and as soon as they come screaming for a downed=20
> server....and right know I'm gone enjoy me Guinness.
>
> Greetings
>
> Rob
>
> -----Oorspronkelijk bericht-----
> Van: thin-bounce@xxxxxxxxxxxxx [mailto:thin-bounce@xxxxxxxxxxxxx]=20
> Namens Jeff Stockard
> Verzonden: vrijdag 2 mei 2003 21:23
> Aan: thin@xxxxxxxxxxxxx
> Onderwerp: [THIN] Re: Classes user rights
>
>
>
> What is the app? Could Power User rights fix this?
>
> -----Original Message-----
> From: Rob Beekmans [mailto:robbeekmans@xxxxxxxxxxxxx]=3D3D20
> Sent: Friday, May 02, 2003 3:07 PM
> To: thin@xxxxxxxxxxxxx
> Subject: [THIN] Re: Classes user rights
>
>
> I know ....and down goes the server.... I've been holding back for 3=20
> =3D =3D3D =3D3D3D months now saying exactly the same.
>
> They don't know where it needs to write, it would take me days to find =
> =3D =3D3D =3D3D3D it out for I don't know the app. I can't free up one =
> server to test it =3D and
> they work 24/7....so finding =3D3D =3D3D3D out is like searching for a =
=3D
> needle in a
> haystack.
>
> Today they said it had to work on Monday, CEO approval all risks =
=3D3D3D=20
> accounted for.....they think ...grin. So my best guess is a few=20
> crashes =3D next week.
>
> Grx
> Rob
>
> -----Oorspronkelijk bericht-----
> Van: thin-bounce@xxxxxxxxxxxxx [mailto:thin-bounce@xxxxxxxxxxxxx]=20
> Namens Paul DeHaan
> Verzonden: vrijdag 2 mei 2003 21:01
> Aan: thin@xxxxxxxxxxxxx
> Onderwerp: [THIN] Re: Classes user rights
>
>
>
> That is definitely a dangerous place to allow user modifications. I
> would use Regmon on the console (isolate the application if possible)=20
> =3D =3D3D =3D3D3D and run the application from a user session (where =
it is=20
> failing) and =3D see =3D3D
> =3D3D3D which reg location it is trying to write to. Usually =
applications =3D
> don't
> make =3D3D3D a whole lot of modifications to this part of the registry =
=3D
> after
> they are installed. Maybe using regmon, you'll find that the app is =
=3D
> only
> trying =3D3D3D to read from some locations and getting denied...who =
knows. =3D
> A
> lot of this depends on your profile setup. If needed just give modify
> permissions =3D3D =3D3D3D to the specific sub keys that are being =3D
> edited...not the
> entire root key. =3D3D3D Give me permissions to that key... and down =
goes =3D
> the
> server <grin>
>
> HTH,
> Paul
>
> >>> robbeekmans@xxxxxxxxxxxxx 05/02/03 02:23PM >>>
> Hi,=3D3D3D20
> =3D3D3D20
> I had a question about settings user rights a hklm\classes. For a=20
> application they asked me to set Full controll for a certain user=20
> group on the hklm\classes (because their app is not working properly)=20
> =3D =3D3D =3D3D3D I'm a bit relectant to do this and I'm wondering how =
> others would feel =3D about
> =3D3D =3D3D3D this request if it was asked you? =3D3D3D20 thanks for =
any help =3D
> grx Rob
>
> ********************************************************
> This Week's Sponsor - Emergent Online
> EOL's Universal Printer new Features include:
> Network Printing, Pagestreaming, 2400 DPI.
> No Client Software Required!
> http://www.go-eol.com/=3D3D3D20
> **********************************************************
>
> For Archives, to Unsubscribe, Subscribe or=3D3D3D20
> set Digest or Vacation mode use the below link:=20
> http://thethin.net/citrixlist.cfm
> ********************************************************
> This Week's Sponsor - Emergent Online
> EOL's Universal Printer new Features include:
> Network Printing, Pagestreaming, 2400 DPI.
> No Client Software Required!
> http://www.go-eol.com/
> **********************************************************
>
> For Archives, to Unsubscribe, Subscribe or=3D3D3D20
> set Digest or Vacation mode use the below link:=20
> http://thethin.net/citrixlist.cfm
>
> ********************************************************
> This Week's Sponsor - Emergent Online
> EOL's Universal Printer new Features include:
> Network Printing, Pagestreaming, 2400 DPI.
> No Client Software Required!
> http://www.go-eol.com/
> **********************************************************
>
> For Archives, to Unsubscribe, Subscribe or=3D3D20
> set Digest or Vacation mode use the below link:=20
> http://thethin.net/citrixlist.cfm
> ********************************************************
> This Week's Sponsor - Emergent Online
> EOL's Universal Printer new Features include:
> Network Printing, Pagestreaming, 2400 DPI.
> No Client Software Required!
> http://www.go-eol.com/
> **********************************************************
>
> For Archives, to Unsubscribe, Subscribe or=3D20
> set Digest or Vacation mode use the below link:=20
> http://thethin.net/citrixlist.cfm
>
> ********************************************************
> This Week's Sponsor - Emergent Online
> EOL's Universal Printer new Features include:
> Network Printing, Pagestreaming, 2400 DPI.
> No Client Software Required!
> http://www.go-eol.com/
> **********************************************************
>
> For Archives, to Unsubscribe, Subscribe or
> set Digest or Vacation mode use the below link:=20
> http://thethin.net/citrixlist.cfm
********************************************************
This Week's Sponsor - Emergent Online
EOL's Universal Printer new Features include:
Network Printing, Pagestreaming, 2400 DPI.
No Client Software Required!
http://www.go-eol.com/
**********************************************************
For Archives, to Unsubscribe, Subscribe or=20
set Digest or Vacation mode use the below link:
http://thethin.net/citrixlist.cfm
********************************************************
This Week's Sponsor - Emergent Online
EOL's Universal Printer new Features include:
Network Printing, Pagestreaming, 2400 DPI.
No Client Software Required!
http://www.go-eol.com/
**********************************************************
For Archives, to Unsubscribe, Subscribe or
set Digest or Vacation mode use the below link:
http://thethin.net/citrixlist.cfm
********************************************************
This Week's Sponsor - Emergent Online
EOL's Universal Printer new Features include:
Network Printing, Pagestreaming, 2400 DPI.
No Client Software Required!
http://www.go-eol.com/
**********************************************************
For Archives, to Unsubscribe, Subscribe or
set Digest or Vacation mode use the below link:
http://thethin.net/citrixlist.cfm
Other related posts:
