Yes, you are correct. However, this application needs to register system
dll's when it is launched. That means I need to grant rights to those
system keys. Which, basically gives them Power User access. Also, I have
tried this since our thread began and it does not work even if I grant
rights to the specific keys. Somehow, the application is looking for "Power
User" membership only.
Thanks for the input.
At 12:37 PM 10/27/2003 -0500, you wrote:
I'm not sure I understand. Can't you leave them as users and then modify the registry entry that you need. Modifying the exact key under HKCR and then see what happens. The whole point behind using regmon was to determine the key to gain access and then disallow anything else. No?
-----Original Message----- From: windows2000-bounce@xxxxxxxxxxxxx [mailto:windows2000-bounce@xxxxxxxxxxxxx] On Behalf Of Matt Fowler Sent: Monday, October 27, 2003 12:30 PM To: windows2000@xxxxxxxxxxxxx Subject: [windows2000] Re: EDExpress software
I agree. I have the exact HKCR key to modify (from regmon). We are likely to add the users to the "power users" group as you state, we are then likely to limit the NTFS permissions for that group.
At 12:25 PM 10/27/2003 -0500, you wrote: >Granting rights to the whole hive is pretty extreme. I'm not sure I'd >go down that route. However, considering the nature of the >application, couldn't you grant these users Power User status. It's a >lot better then admin... No? What did regmon say? > >-----Original Message----- >From: windows2000-bounce@xxxxxxxxxxxxx >[mailto:windows2000-bounce@xxxxxxxxxxxxx] On Behalf Of Matt Fowler >Sent: Monday, October 27, 2003 9:39 AM >To: windows2000@xxxxxxxxxxxxx >Subject: [windows2000] Re: EDExpress software > > >I agree and that is sort-of the direction we have been heading. This >specific application register's various dll's every time it is >launched. This means that the user needs access to the HKCR registry >section for registering dll's. We have been considering adding the user >to Power User and then limiting the rights that Power User's have on >the machine. Or, just granting the rights to the HKCR registry for >those specific user's. Any comments? > >Thanks, > > >At 09:30 AM 10/27/2003 -0500, you wrote: > >Matt, > > > >Not sure that we tried this due to our users being power users. > >However, if you use RegMon from www.sysinternals.com, you should be > >able to see what registry entries the application is attempting to > >touch. With that, you should be able to modify the permissions on > >the registry key itself, instead of give each user the higher > >privileges. > > > >Rick > >Sandhills Community College > >Pinehurst, NC 28374 > >910-695-3943 > >rick@xxxxxxxxxxxxx > > > >-----Original Message----- > >From: windows2000-bounce@xxxxxxxxxxxxx > >[mailto:windows2000-bounce@xxxxxxxxxxxxx] On Behalf Of Matt Fowler > >Sent: Monday, October 27, 2003 9:19 AM > >To: windows2000@xxxxxxxxxxxxx; mswindowsxp@xxxxxxxxxxxxx > >Subject: [windows2000] EDExpress software > > > > > >Does anyone have any experience getting ths software functional under > >Windows 2000 or XP without granting users membership to the "Power > >User" group? > > > >Thanks, > > > >Matt Fowler > >LAN Specialist > >(847)925-6113 > >mfowler@xxxxxxxxxxxxxxx > >******************************************************** > >This Week's Sponsor - RTO Software / TScale > >What's keeping you from getting more from your terminal servers? Did > >you know, in most cases, CPU Utilization IS NOT the single biggest > >constraint to scaling up?! Get this free white paper to understand > >the real constraints & how to overcome them. SAVE MONEY by scaling-up > >rather than buying more servers. > >http://www.rtosoft.com/Enter.asp?ID=147 > >********************************************************** > >To Unsubscribe, set digest or vacation > >mode or view archives use the below link. > > > >http://thethin.net/win2000list.cfm > > > >******************************************************** > >This Week's Sponsor - RTO Software / TScale > >What's keeping you from getting more from your terminal servers? Did > >you know, in most cases, CPU Utilization IS NOT the single biggest > >constraint to scaling up?! Get this free white paper to understand > >the real constraints & how to overcome them. SAVE MONEY by scaling-up > >rather than buying more servers. > >http://www.rtosoft.com/Enter.asp?ID=147 > >********************************************************** > >To Unsubscribe, set digest or vacation > >mode or view archives use the below link. > > > >http://thethin.net/win2000list.cfm > >Matt Fowler >LAN Specialist >(847)925-6113 >mfowler@xxxxxxxxxxxxxxx >******************************************************** >This Week's Sponsor - RTO Software / TScale >What's keeping you from getting more from your terminal servers? Did >you know, in most cases, CPU Utilization IS NOT the single biggest >constraint to scaling up?! Get this free white paper to understand the >real constraints & how to overcome them. SAVE MONEY by scaling-up >rather than buying more servers. >http://www.rtosoft.com/Enter.asp?ID=147 >********************************************************** >To Unsubscribe, set digest or vacation >mode or view archives use the below link. > >http://thethin.net/win2000list.cfm > >******************************************************** >This Week's Sponsor - RTO Software / TScale >What's keeping you from getting more from your terminal servers? Did >you >know, in most cases, CPU Utilization IS NOT the single biggest constraint >to scaling up?! Get this free white paper to understand the real >constraints & how to overcome them. SAVE MONEY by scaling-up rather than >buying more servers. >http://www.rtosoft.com/Enter.asp?ID=147 >********************************************************** >To Unsubscribe, set digest or vacation >mode or view archives use the below link. > >http://thethin.net/win2000list.cfm
Matt Fowler LAN Specialist (847)925-6113 mfowler@xxxxxxxxxxxxxxx ******************************************************** This Week's Sponsor - RTO Software / TScale What's keeping you from getting more from your terminal servers? Did you know, in most cases, CPU Utilization IS NOT the single biggest constraint to scaling up?! Get this free white paper to understand the real constraints & how to overcome them. SAVE MONEY by scaling-up rather than buying more servers. http://www.rtosoft.com/Enter.asp?ID=147 ********************************************************** To Unsubscribe, set digest or vacation mode or view archives use the below link.
http://thethin.net/win2000list.cfm
********************************************************
This Week's Sponsor - RTO Software / TScale
What's keeping you from getting more from your terminal servers? Did you know, in most cases, CPU Utilization IS NOT the single biggest constraint to scaling up?! Get this free white paper to understand the real constraints & how to overcome them. SAVE MONEY by scaling-up rather than buying more servers.
http://www.rtosoft.com/Enter.asp?ID=147
**********************************************************
To Unsubscribe, set digest or vacation
mode or view archives use the below link.
http://thethin.net/win2000list.cfm
Matt Fowler LAN Specialist (847)925-6113 mfowler@xxxxxxxxxxxxxxx ******************************************************** This Week's Sponsor - RTO Software / TScale What's keeping you from getting more from your terminal servers? Did you know, in most cases, CPU Utilization IS NOT the single biggest constraint to scaling up?! Get this free white paper to understand the real constraints & how to overcome them. SAVE MONEY by scaling-up rather than buying more servers. http://www.rtosoft.com/Enter.asp?ID=147 ********************************************************** To Unsubscribe, set digest or vacation mode or view archives use the below link.
