Windows Forum

Ask something
Discussion Locked

user rights

0 helpful
9 replies

by nhughes79 1 view

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

I wonder if anyone can shed any light on a little problem I am having in Win 2000...

One of my users wishes to install a demo of Flash 5. In order for me to install it I have to log on as Administrator. (we are running Novell for Windows 2000 aswell)
It installs fine, but when he logs back on it says he needs Power user or administrator right to run it.

So I changed his group membership to both administrator and Power user, but it still states he needs power user/administrator right torun it, even though I have changed his right??

If anyone has any clue how to rectify this I would be very grateful

Kind Regards
Neil Hughes

9 replies

by kenalmoore

You should put that user into the power user group. Giving a user local administrative rights is not always the answer.
Another way could be Adding the user to the local administrator, but change to local admin password so he is the only one that can log. In other words don't give this user the local admin password for all of your pc's make his different but one you could remember.

by kenalmoore

Please look at MS Knowledge Base ID Q234926.
Resource kit you can run the 'Compatws.inf'
which loosens security restrictions and enbles software applications to run.

by kenalmoore

Another method we use is to make a
'Installer' a normal user then add 'installer' to administrators group.
Then this user can use the installer to
add this program. When user logs back in
as normal user the program should run normally.

by stillatit

If you are not comfortable with letting random software write into the system area in random places, you can find the explicit files it is trying to write, and just open permissions on those. As the admin, turn on auditing for the user and failure auditing for the Windows directory. Have the user log in and try access, which will log the filenames attempted to the security log. You can then open rights on those files only.

Good luck.

by oridjinn

Apply the Compatws.inf security profile to the machine. This allows the applications to run with greater access rights and you can re-assign to the power-users group.

This discussion is closed to new replies.