True, unless the application is specifically looking for group membership
instead of at NTFS or Registry permissions. We have an application
(EDExpress) that requires at least Power User membership, even Full rights
to c: and HKLM\Software are not enough and the manufacturer blames M$.
At 08:54 AM 3/24/04 -0800, you wrote:
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1
Anthony Abraham wrote:
| We have some apps that don't run without Local Admin rights (supposedly).. | Not ideal but thats how it was when I got here so instead of removing this | and downgrading them to Power User and potentially causing issues, I want to | use Group Policy to remove some security concerns...
Personally I'd have to say even power users is way too much. The best way is to use the tools at www.sysinternals.com to determine the exact permissions, but giving domain users write permission to Program Files and WINNT + Full control of HKLM\Software will handle 95% of all issues, with far less security risk.
- -- Chris Berry chris_berry@xxxxxxxxxxxxxxxxx Systems Administrator JM Associates & Coast Business Service
"He who laughs last probably made a back-up." --Murphy's Seventh law of computing -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.1 (MingW32) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
iD8DBQFAYb00kAS13ByzgbsRAh9NAKCixYVaYWV24N2jQly/OL6OjgtLDACgu13R 3r/TNI99lm7p83qTNTxoVgo= =NEIg -----END PGP SIGNATURE----- ******************************************************** This Weeks Sponsor StressedPuppy.com Games Feeling stressed out? Check out our games to relieve your stress. http://www.StressedPuppy.com ******************************************************** To Unsubscribe, set digest or vacation mode or view archives use the below link.
http://thethin.net/win2000list.cfm
Matt Fowler LAN Specialist (847)925-6113 mfowler@xxxxxxxxxxxxxxx ******************************************************** This Weeks Sponsor StressedPuppy.com Games Feeling stressed out? Check out our games to relieve your stress. http://www.StressedPuppy.com ******************************************************** To Unsubscribe, set digest or vacation mode or view archives use the below link.
