Question

Locked

Windows SBS 2003 permissions help

By tuckerobie ·
I am setting up a Windows SBS 2003 R2 server to host a point of sales application for a family owned store. When I try to run the software from the workstation logged in to the domain as a user the program wont run. When I try it as an admin it runs just fine. I have set folder permissions to allow users full access to the folder and program. I am not a tech pro I am just the one at this family owned business that was lucky enough to be given this task... Any help would be wonderfull!

Tucker

This conversation is currently closed to new comments.

15 total posts (Page 1 of 2)   01 | 02   Next
| Thread display: Collapse - | Expand +

All Answers

Collapse -

That Usually Means Permissions

by SAJChurchey In reply to Windows SBS 2003 permissi ...

So the application is installed on the server? How is the user supposed to access the application from the workstation (What are the steps involved to start the program)? What all was involved in installing the program to begin with?

Also, when you are running the application as administrator, are you running it on the workstation as administrator or on the server as the administrator?

It is most likely that there is another file or a registry key *somewhere* that still needs the permissions changed for the users to be able to run.

Collapse -

Thanks

by tuckerobie In reply to That Usually Means Permis ...

There is a runtime program that is installed on all computers in order for them to run the actual exe that is a file located on the server. The initial install of the program is just a matter of copying the program files to the share location and installing the runtime files.

All of my testing has taken place on the end user workstation as admin and user.

How would I go about finding this registry key?

Thank you so much for taking the time to help me with this.

Collapse -

SysInternals Suite

by SAJChurchey In reply to Thanks

For this kind of problem, I usually use two tools: FileMon and RegMon (Download them from http://technet.microsoft.com/en-us/sysinternals/86a95979-23f8-45f5-9480-f4ed9dab3aab.aspx)

These tools run in the background and monitors every file/registry transaction that the computer is performing (along with the name of the program trying to complete the task). In these situations, you usually looking for a few transactions to fail with the reason being "ACCESS_DENIED."

Log in as the user. You need to start FileMon as the administrator (right click on the EXE and use "Run As" and enter the administrator login info). While FileMon is up, try to start the program and FileMon will start recording the attempts of different programs to open/close/write to files. Once you are sure that the program has failed to start, stop the Capture and look through the various transactions. You're looking for one that says ACCESS_DENIED. The path to the file/registry key should also be given, and this is the file/folder you need to change permissions on.

RegMon (monitors the registry) works pretty much the exact same way, but it only deals with attempts to use the registry. You can also start the registry editor (start -> Run -> regedit) and you can change the permissions on keys in much the same way as files (Right-Click, Permissions, Security tab). Be careful not to REMOVE any permissions or you may break your system.

If you fool around with the FileMon/RegMon interface, you'll discover that you can Exclude processes you're not concerned with (like a lot of the background programs/processes) and you can start/stop the capture at will. Remember that you're only concerned with the one program that you're trying to use, anything else is just clutter.

I know this is a bit technical, but it's the easiest way I've found to solve these kinds of problems. You may also consider changing your user account to at least "Power User" or "Administrator" and this should also resolve these permission issues without a lot of fuss. It sounds like you are trying to avoid doing this, and I agree that it's best if everyday users use a non-administrative account.

It may be a bit complicated, but please post here with for any more help/explanations.

Collapse -

Thanks again

by tuckerobie In reply to SysInternals Suite

This has been extremely helpfull! I will let you know what I come up with.

Collapse -

Not found

by tuckerobie In reply to SysInternals Suite

In regmon Im getting alot of not founds on the exe in question.

Collapse -

Maybe not Installed Properly

by SAJChurchey In reply to Not found

I wouldn't worry TOO much about Not Founds. Sometimes a program will check to see if something is there and if not, create it, and some programs do this everytime you start it.

If it is causing your problem, it would mean that the program wasn't installed on the workstation correctly, and I would try to install the runtime files again.

You didn't find any "ACCESS DENIED?" How about FileMon? Any promising results there.

You may also want to go ahead and escalate the user's privleges to Administrator. If the user is then able to open the program, then we are correct in believing it is the permissions and are on the right track.

Collapse -

Perhaps

by tuckerobie In reply to Maybe not Installed Prope ...

Im not seeing any "Access Denied" just "Not Found" if I go to the properties of the file or process that says not found it says <access denied> there... I think I will reinstall and try again from scratch with the application and use regmon and filemon from the beginning.

Collapse -

Any luck?

by SAJChurchey In reply to Perhaps

How is everything going? Solved the problem yet? Any luck with escalating the user account to an Administrator?

Collapse -

your problem is domain user accounts

by CG IT In reply to Thanks

which are limited rights accounts.

if you install the client program on workstations [POS unit] which runs Windows XP, you need to use the runas and use the admin account.

Is this a POS system that boots to XP and then automatically launches the POS software? or is this a turnkey POS system?

Collapse -

XP

by tuckerobie In reply to your problem is domain us ...

The POS units are windows XP Pro machines that then launch the software.

Back to Networks Forum
15 total posts (Page 1 of 2)   01 | 02   Next

Hardware Forums