Re: How to track dpwn programs that fail in Restricted User Accoun

[Adam White]

And some times registry locations such as CLSID, if the program registers
DLLs on the fly

- Adam

"Roger Abell" wrote:

> Like Nutcase says, very often it is just need for modify grant to Users
> group on the c:\program files\application-install-point folder
> so it is worth a try before digging in more deeply with the tools from
> sysinternals. However, if you are dealing with an old application,
> Win9x era or worse, this may well not be sufficient and for some
> it may be impossible to make the prog work in limited account.
>
> --
> Roger Abell
> Microsoft MVP (Windows Security)
>
> "John7" > wrote in message
> ...
> > Hi,
> >
> > Are there any tools or sources that help to track down why certain
> programs
> > fail to work (properly) in Restricted User Accounts.
> >
> > I do not intend to grant every user Administrative rights.
> >
> > TIA,
> > John7
> >
> >
>
>
>

[Roger Abell]

"Adam White" > wrote in message
...
> And some times registry locations such as CLSID, if the program registers
> DLLs on the fly
>
> - Adam
>

Yes, but that is one grant I would not like to give to Users.
I have no real issue with granting Users write over the reg
key structure of a specific application in HKLM\Software
when that is needed by a misbehaved app.

--
Roger Abell
Microsoft MVP (Windows Security)


> "Roger Abell" wrote:
>
> > Like Nutcase says, very often it is just need for modify grant to Users
> > group on the c:\program files\application-install-point folder
> > so it is worth a try before digging in more deeply with the tools from
> > sysinternals. However, if you are dealing with an old application,
> > Win9x era or worse, this may well not be sufficient and for some
> > it may be impossible to make the prog work in limited account.
> >
> > --
> > Roger Abell
> > Microsoft MVP (Windows Security)
> >
> > "John7" > wrote in message
> > ...
> > > Hi,
> > >
> > > Are there any tools or sources that help to track down why certain
> > programs
> > > fail to work (properly) in Restricted User Accounts.
> > >
> > > I do not intend to grant every user Administrative rights.
> > >
> > > TIA,
> > > John7
> > >
> > >
> >
> >
> >

[John7]

"Roger Abell" > wrote in message
...
> "Adam White" > wrote in message
> ...
> > And some times registry locations such as CLSID, if the program
registers
> > DLLs on the fly
> >
> > - Adam
> >
>
> Yes, but that is one grant I would not like to give to Users.
> I have no real issue with granting Users write over the reg
> key structure of a specific application in HKLM\Software
> when that is needed by a misbehaved app.
>
> --
> Roger Abell
> Microsoft MVP (Windows Security)
>
>
> > "Roger Abell" wrote:
> >
> > > Like Nutcase says, very often it is just need for modify grant to
Users
> > > group on the c:\program files\application-install-point folder
> > > so it is worth a try before digging in more deeply with the tools from
> > > sysinternals. However, if you are dealing with an old application,
> > > Win9x era or worse, this may well not be sufficient and for some
> > > it may be impossible to make the prog work in limited account.
> > >
> > > --
> > > Roger Abell
> > > Microsoft MVP (Windows Security)
> > >
> > > "John7" > wrote in message
> > > ...
> > > > Hi,
> > > >
> > > > Are there any tools or sources that help to track down why certain
> > > programs
> > > > fail to work (properly) in Restricted User Accounts.
> > > >
> > > > I do not intend to grant every user Administrative rights.
> > > >
> > > > TIA,
> > > > John7
> > > >
> > > >
> > >


Thank you all for responding.

So I would need to stick to Sysinternals, RegMon, FileMon, ProcExp(lorer).
Is there no All-In-One tool ?

Would these MS tools be of any use to track down Restricted User Account
issues?
- Pstat
- ACT (Application Compatibility Tool)


TIA,
John7

[Roger Abell]

ACT is of use especially for older software, that is, when it is
not simply a permissions issue but one of the application using
depricated API calls, etc..

There is not, to my awareness, a all-in-one, point at the application
and provide the account and its password, and wait tool.
Things are probably too situational and the return on effort too small
for anyone to have developed such a tool.

--
Roger Abell
Microsoft MVP (Windows Security)
MCSE (W2k3,W2k,Nt4) MCDBA
"John7" > wrote in message
...
>
> "Roger Abell" > wrote in message
> ...
> > "Adam White" > wrote in message
> > ...
> > > And some times registry locations such as CLSID, if the program
> registers
> > > DLLs on the fly
> > >
> > > - Adam
> > >
> >
> > Yes, but that is one grant I would not like to give to Users.
> > I have no real issue with granting Users write over the reg
> > key structure of a specific application in HKLM\Software
> > when that is needed by a misbehaved app.
> >
> > --
> > Roger Abell
> > Microsoft MVP (Windows Security)
> >
> >
> > > "Roger Abell" wrote:
> > >
> > > > Like Nutcase says, very often it is just need for modify grant to
> Users
> > > > group on the c:\program files\application-install-point folder
> > > > so it is worth a try before digging in more deeply with the tools
from
> > > > sysinternals. However, if you are dealing with an old application,
> > > > Win9x era or worse, this may well not be sufficient and for some
> > > > it may be impossible to make the prog work in limited account.
> > > >
> > > > --
> > > > Roger Abell
> > > > Microsoft MVP (Windows Security)
> > > >
> > > > "John7" > wrote in message
> > > > ...
> > > > > Hi,
> > > > >
> > > > > Are there any tools or sources that help to track down why certain
> > > > programs
> > > > > fail to work (properly) in Restricted User Accounts.
> > > > >
> > > > > I do not intend to grant every user Administrative rights.
> > > > >
> > > > > TIA,
> > > > > John7
> > > > >
> > > > >
> > > >
>
>
> Thank you all for responding.
>
> So I would need to stick to Sysinternals, RegMon, FileMon, ProcExp(lorer).
> Is there no All-In-One tool ?
>
> Would these MS tools be of any use to track down Restricted User Account
> issues?
> - Pstat
> - ACT (Application Compatibility Tool)
>
>
> TIA,
> John7
>
>