Problems with winexit.exe and "power users"

Hi,

I am a computer lab technician at Gonzaga University. I manage 150
computers all using winXP sp2 in a lab setting. We are trying to use a
microsoft product called winexit.exe. I have installed the new version for
XP. We are on an active directory system here. We use to have no problem
when our lab computers were running Win2000, and our users were all in the
administrators group. Now we have tightened up security by placing all our
users in the power users group.

Also, we used to set our winexit.exe screen saver settings logged on as
administrator then copy our administrator profile over our default user
profile.

When we try to rely on the default user profile now to initiate winexit.exe,
nothing happens. So we have gone to trying to use the group policy settings
in active directory. We have had a minor success with that. As long as an
administrator is logged on, winexit works properly. But when someone in the
power users group is logged on, winexit fails when it attempts to log them
off. An error message appears that says:
Error encountered while creating registry key. Make sure you have Set Value
and Create Subkey permissions.

Once we click "OK" on that, the log off continues properly.

I have tried adding the power users group to all the main registry keys and
editing the permissions to include those permissions, but it still happens.

I am open to having any kind of auto log off that will work consistently
with new profiles on an active directory, WinXP sp2 system.

Can anyone help me?

--
Rob

"Eddies in the space/time continuum"
Ford Prefect

From:http://www.tburke.net/info/reskittoo...cs/winexit.htm

In order for non-administrators to be able to use WinExit, you must add =
Set Value and Create Subkey permissions for the group Everyone on the =
registry key:

HKEY_Local_Machine\Software\Microsoft\Windows NT\CurrentVersion

--=20
Doug Knox, MS-MVP Windows Media Center\Windows Powered Smart =
Display\Security
Win 95/98/Me/XP Tweaks and Fixes
http://www.dougknox.com
--------------------------------
Per user Group Policy Restrictions for XP Home and XP Pro
http://www.dougknox.com/xp/utils/xp_securityconsole.htm
--------------------------------
Please reply only to the newsgroup so all may benefit.
Unsolicited e-mail is not answered.
=20
"ArrrghBob" wrote in message =
...
Hi,
=20
I am a computer lab technician at Gonzaga University. I manage 150=20
computers all using winXP sp2 in a lab setting. We are trying to use =
a=20
microsoft product called winexit.exe. I have installed the new =
version for=20
XP. We are on an active directory system here. We use to have no =
problem=20
when our lab computers were running Win2000, and our users were all in =
the=20
administrators group. Now we have tightened up security by placing =
all our=20
users in the power users group.
=20
Also, we used to set our winexit.exe screen saver settings logged on =
as=20
administrator then copy our administrator profile over our default =
user=20
profile.
=20
When we try to rely on the default user profile now to initiate =
winexit.exe,=20
nothing happens. So we have gone to trying to use the group policy =
settings=20
in active directory. We have had a minor success with that. As long =
as an=20
administrator is logged on, winexit works properly. But when someone =
in the=20
power users group is logged on, winexit fails when it attempts to log =
them=20
off. An error message appears that says:
Error encountered while creating registry key. Make sure you have Set =
Value=20
and Create Subkey permissions.
=20
Once we click "OK" on that, the log off continues properly.
=20
I have tried adding the power users group to all the main registry =
keys and=20
editing the permissions to include those permissions, but it still =
happens.
=20
I am open to having any kind of auto log off that will work =
consistently=20
with new profiles on an active directory, WinXP sp2 system.
=20
Can anyone help me?
=20
--=20
Rob
=20
"Eddies in the space/time continuum"
Ford Prefect

Adding to what Doug said:

Winexit.scr always causes this error when run from a restricted user
account. Here is the information you need:

http://www.jsiinc.com/SUBc/tip1100/rh1179.htm

HKEY_Local_Machine\Software\Microsoft\Windows
NT\CurrentVersion\IniFileMapping\Control.ini

BTW, the solution is to set appropriate permissions for the registry key
discussed in that article. You can find more information about registry
permissions in this article:

How To Use the Windows XP and Windows Server 2003 Registry Editor Features:
http://support.microsoft.com/?kbid=310426

--
Ramesh, Microsoft MVP
Windows XP Shell/User
http://windowsxp.mvps.org


"ArrrghBob" wrote in message
...
Hi,

I am a computer lab technician at Gonzaga University. I manage 150
computers all using winXP sp2 in a lab setting. We are trying to use a
microsoft product called winexit.exe. I have installed the new version
for
XP. We are on an active directory system here. We use to have no problem
when our lab computers were running Win2000, and our users were all in the
administrators group. Now we have tightened up security by placing all
our
users in the power users group.

Also, we used to set our winexit.exe screen saver settings logged on as
administrator then copy our administrator profile over our default user
profile.

When we try to rely on the default user profile now to initiate
winexit.exe,
nothing happens. So we have gone to trying to use the group policy
settings
in active directory. We have had a minor success with that. As long as
an
administrator is logged on, winexit works properly. But when someone in
the
power users group is logged on, winexit fails when it attempts to log them
off. An error message appears that says:
Error encountered while creating registry key. Make sure you have Set
Value
and Create Subkey permissions.

Once we click "OK" on that, the log off continues properly.

I have tried adding the power users group to all the main registry keys
and
editing the permissions to include those permissions, but it still
happens.

I am open to having any kind of auto log off that will work consistently
with new profiles on an active directory, WinXP sp2 system.

Can anyone help me?

--
Rob

"Eddies in the space/time continuum"
Ford Prefect

"ArrrghBob" wrote in message
...
Can anyone help me?

Keep in mind that if the user has locked the computer, winexit may not log off,
as discussed he

http://www.winability.com/active-exit/winexit.htm

You may want to consider using our product ActiveExit instead of winexit (see
the web page above for more information).

--
HTH

Andrei Belogortseff
WinAbility(r) Software Corp. [ http://www.winability.com/ ]
"Useful Windows Utilities and Security Software"

Thank you so much Doug!!
--
Rob

"Eddies in the space/time continuum"
Ford Prefect


"Doug Knox MS-MVP" wrote:

From:http://www.tburke.net/info/reskittoo...cs/winexit.htm

In order for non-administrators to be able to use WinExit, you must add Set Value and Create Subkey permissions for the group Everyone on the registry key:

HKEY_Local_Machine\Software\Microsoft\Windows NT\CurrentVersion

--
Doug Knox, MS-MVP Windows Media Center\Windows Powered Smart Display\Security
Win 95/98/Me/XP Tweaks and Fixes
http://www.dougknox.com
--------------------------------
Per user Group Policy Restrictions for XP Home and XP Pro
http://www.dougknox.com/xp/utils/xp_securityconsole.htm
--------------------------------
Please reply only to the newsgroup so all may benefit.
Unsolicited e-mail is not answered.

"ArrrghBob" wrote in message ...
Hi,

I am a computer lab technician at Gonzaga University. I manage 150
computers all using winXP sp2 in a lab setting. We are trying to use a
microsoft product called winexit.exe. I have installed the new version for
XP. We are on an active directory system here. We use to have no problem
when our lab computers were running Win2000, and our users were all in the
administrators group. Now we have tightened up security by placing all our
users in the power users group.

Also, we used to set our winexit.exe screen saver settings logged on as
administrator then copy our administrator profile over our default user
profile.

When we try to rely on the default user profile now to initiate winexit.exe,
nothing happens. So we have gone to trying to use the group policy settings
in active directory. We have had a minor success with that. As long as an
administrator is logged on, winexit works properly. But when someone in the
power users group is logged on, winexit fails when it attempts to log them
off. An error message appears that says:
Error encountered while creating registry key. Make sure you have Set Value
and Create Subkey permissions.

Once we click "OK" on that, the log off continues properly.

I have tried adding the power users group to all the main registry keys and
editing the permissions to include those permissions, but it still happens.

I am open to having any kind of auto log off that will work consistently
with new profiles on an active directory, WinXP sp2 system.

Can anyone help me?

--
Rob

"Eddies in the space/time continuum"
Ford Prefect

Thank you sincerely, Ramesh, you were extremely helpful!!!
--
Rob

"Eddies in the space/time continuum"
Ford Prefect


"Ramesh, MS-MVP" wrote:

Adding to what Doug said:

Winexit.scr always causes this error when run from a restricted user
account. Here is the information you need:

http://www.jsiinc.com/SUBc/tip1100/rh1179.htm

HKEY_Local_Machine\Software\Microsoft\Windows
NT\CurrentVersion\IniFileMapping\Control.ini

BTW, the solution is to set appropriate permissions for the registry key
discussed in that article. You can find more information about registry
permissions in this article:

How To Use the Windows XP and Windows Server 2003 Registry Editor Features:
http://support.microsoft.com/?kbid=310426

--
Ramesh, Microsoft MVP
Windows XP Shell/User
http://windowsxp.mvps.org


"ArrrghBob" wrote in message
...
Hi,

I am a computer lab technician at Gonzaga University. I manage 150
computers all using winXP sp2 in a lab setting. We are trying to use a
microsoft product called winexit.exe. I have installed the new version
for
XP. We are on an active directory system here. We use to have no problem
when our lab computers were running Win2000, and our users were all in the
administrators group. Now we have tightened up security by placing all
our
users in the power users group.

Also, we used to set our winexit.exe screen saver settings logged on as
administrator then copy our administrator profile over our default user
profile.

When we try to rely on the default user profile now to initiate
winexit.exe,
nothing happens. So we have gone to trying to use the group policy
settings
in active directory. We have had a minor success with that. As long as
an
administrator is logged on, winexit works properly. But when someone in
the
power users group is logged on, winexit fails when it attempts to log them
off. An error message appears that says:
Error encountered while creating registry key. Make sure you have Set
Value
and Create Subkey permissions.

Once we click "OK" on that, the log off continues properly.

I have tried adding the power users group to all the main registry keys
and
editing the permissions to include those permissions, but it still
happens.

I am open to having any kind of auto log off that will work consistently
with new profiles on an active directory, WinXP sp2 system.

Can anyone help me?

--
Rob

"Eddies in the space/time continuum"
Ford Prefect

Thanks for the reminder Andrei!!
--
Rob

"Eddies in the space/time continuum"
Ford Prefect


"WinAbility.Com" wrote:

"ArrrghBob" wrote in message
...
Can anyone help me?

Keep in mind that if the user has locked the computer, winexit may not log off,
as discussed he

http://www.winability.com/active-exit/winexit.htm

You may want to consider using our product ActiveExit instead of winexit (see
the web page above for more information).

--
HTH

Andrei Belogortseff
WinAbility(r) Software Corp. [ http://www.winability.com/ ]
"Useful Windows Utilities and Security Software"

You're welcome Rob.

--
Ramesh, Microsoft MVP
Windows XP Shell/User
http://windowsxp.mvps.org


"ArrrghBob" wrote in message
...
Thank you sincerely, Ramesh, you were extremely helpful!!!
--
Rob

"Eddies in the space/time continuum"
Ford Prefect


"Ramesh, MS-MVP" wrote:

Adding to what Doug said:

Winexit.scr always causes this error when run from a restricted user
account. Here is the information you need:

http://www.jsiinc.com/SUBc/tip1100/rh1179.htm

HKEY_Local_Machine\Software\Microsoft\Windows
NT\CurrentVersion\IniFileMapping\Control.ini

Hello,

I have nearly the same situation as the user Rob. We are trying to employ
the winexit.scr screensaver to make sure that public computer lab users
cannot leave themselves logged in. These domain users are simply classified
as Users in Active Directory for our university. We do not manage this
domain, so cannot classify them as Power Users or Admins. Right now,
Winexit.scr only runs for me when I'm logged in as a local admin.

I tried to follow the directions in this post, however when I browse to the
suggested registry key HKEY_Local_Machine\Software\Microsoft\Windows
NT\CurrentVersion, I do not see Set Value or Create Subkey here, nor do I see
these in HKEY_Local_Machine\Software\Microsoft\Windows
NT\CurrentVersion\IniFileMapping\Control.ini. perhaps it is obvious that I
am not an experienced Registry Editor...I really haven't done much with
Regedit, so I guess I am missing something here?

Can you point me in the right direction?

Many thanks,
-Chris

"Ramesh, MS-MVP" wrote:

Adding to what Doug said:

Winexit.scr always causes this error when run from a restricted user
account. Here is the information you need:

http://www.jsiinc.com/SUBc/tip1100/rh1179.htm

HKEY_Local_Machine\Software\Microsoft\Windows
NT\CurrentVersion\IniFileMapping\Control.ini

BTW, the solution is to set appropriate permissions for the registry key
discussed in that article. You can find more information about registry
permissions in this article:

How To Use the Windows XP and Windows Server 2003 Registry Editor Features:
http://support.microsoft.com/?kbid=310426

--
Ramesh, Microsoft MVP
Windows XP Shell/User
http://windowsxp.mvps.org


"ArrrghBob" wrote in message
...
Hi,

I am a computer lab technician at Gonzaga University. I manage 150
computers all using winXP sp2 in a lab setting. We are trying to use a
microsoft product called winexit.exe. I have installed the new version
for
XP. We are on an active directory system here. We use to have no problem
when our lab computers were running Win2000, and our users were all in the
administrators group. Now we have tightened up security by placing all
our
users in the power users group.

Also, we used to set our winexit.exe screen saver settings logged on as
administrator then copy our administrator profile over our default user
profile.

When we try to rely on the default user profile now to initiate
winexit.exe,
nothing happens. So we have gone to trying to use the group policy
settings
in active directory. We have had a minor success with that. As long as
an
administrator is logged on, winexit works properly. But when someone in
the
power users group is logged on, winexit fails when it attempts to log them
off. An error message appears that says:
Error encountered while creating registry key. Make sure you have Set
Value
and Create Subkey permissions.

Once we click "OK" on that, the log off continues properly.

I have tried adding the power users group to all the main registry keys
and
editing the permissions to include those permissions, but it still
happens.

I am open to having any kind of auto log off that will work consistently
with new profiles on an active directory, WinXP sp2 system.

Can anyone help me?

--
Rob

"Eddies in the space/time continuum"
Ford Prefect