If you're using regedt32 and right click on the appropriate folder in
H_KEY_LOCAL COMPUTER you can set what ever permissions are needed. It
appears to me that some software requires a write permission to its keys
in the registry. For example: My Outlook would not retain the passwords
to my email account and required that I enter them every time. I had
local admin authority and domain admin authority but didn't keep a local
Shirley account on my workstation. I went into the H_KEY_LOCAL COMPUTER
and gave the Outlook folder there write permissions for my account. All
fixed up.
Shirley
-----Original Message-----
From: Gary Polvinale [mailto:
garyp@...]
Sent: Thursday, November 06, 2003 3:25 PM
To:
vantage@yahoogroups.com
Subject: RE: [Vantage] [OT] Win2K Administrator Rights
Todd,
What are you ranting about now? Just kidding `~]. This W2K security is
driving me nuts too. Some software seems to be written to work in a
multi-user environment - and other software only says that it will.
Example: We just purchased DLOG for CNC programs control. The guy just
left
after 2 days of installing it for 4 CNC machines. No matter what we
did,
neither he nor I could make that software work under any more than one
(count 'em) one login (we have multiple logins on that workstation out
there). I'm dangerous when it comes to hacking the registry, so what do
I
do last night? Why the logical thing - go right into the registry, and
try
to grant security rights to other user accounts on that workstation by
opening up the security on their registries. Good thing I had a Drive
Image
backup. Hosed W2K on that ws.
So:
1) Shirley, I'll try your suggestion about adding domain admin to a
local
group. Could this problem be fixed by a simple hack to the registry
software section you describe (I don't want to have to restore
everything
again if I don't have to, so I thought I'd ask)? I'm really pretty
careful
in the registry and known mine fields.
2) I know a couple of people out there said they had DLOG installed.
Any
help from that direction?
I'm learning as I go too, Todd. If Macrosoft made this stuff easy, they
wouldn't be getting big bucks for MCSA certs (they learned that from
Novell). Keep in mind that the domain security policies override local
permissions. But from what I understand, if you give a user local
administrator rights, and they log onto the domain as only a standard
user,
they should be able to have software work that writes to the registry
and
the WinNT folders. Now that's what I understand. And that seems to
work s
o m e t i m e s. Other times, I have had to successfully open up the
user's
registry security (again, russian roulette). Other times, I've had to
grant
permissions on the WinNT folder and subfolders (not my favorite choice
either).
Is there a simple set of rules of precedence for W2K domain security
that
actually work when it comes to running software on W2K? Or maybe some
really straightforward way to make it work (authorized by Chilly Billy,
or
not)?
Gary Polvinale
Denton ATD
-----Original Message-----
From: Todd Caughey [mailto:
caugheyt@...]
Sent: Thursday, November 06, 2003 1:02 PM
To:
vantage@yahoogroups.com
Subject: RE: [Vantage] [OT] Win2K Administrator Rights
Interesting - there are two users on machine - Administrator and
User-on-domain. I have to add a user on local machine too and assign
admin
rights there? Then user has to login locally in order to install and
change
settings? Will this also allow them to login on network and still
install
stuff? A lot of what we install is stored on network (like printers).
Interesting thing is my own Win2K PC imposes no such barriers to me. I
can
do anything I want without ever logging in as Administrator. I don't
know
how I did it (ignorance is bliss?).
Thanks,
-Todd C.
PS - Shirley - I just looked at regedt32 and noticed a security menu
item at
top of screen. Can I just turn on full control there or do I have to
figure
out which of hundreds of cryptic keys I want to mess with?
-----Original Message-----
From: Jim Horton [mailto:
jim.horton@...]
Sent: Thursday, November 06, 2003 11:52 AM
To:
vantage@yahoogroups.com
Subject: RE: [Vantage] [OT] Win2K Administrator Rights
If you give Administrator rights to the User on the Local Computer, not
the
domain or wookgroup. They will/should have full admin rights for
software
install and etc...
Jim Horton
Information Systems
Tel: 269-668-3377
Fax: 269-668-5132
www.Mol-Son.com
-----Original Message-----
From: Todd Caughey [mailto:
caugheyt@...]
Sent: Thursday, November 06, 2003 12:39 PM
To:
vantage@yahoogroups.com
Subject: [Vantage] [OT] Win2K Administrator Rights
I'm starting to convert a lot of users from Win98 to Win2K and getting
real
frustrated with the "protections" forced on me. Although I have set
users
up in the "Adminstrator" group they still can not do many things such as
install software or even change the screen saver power saving settings.
I've looked all over and can't find where to say "User X can do
everything
Administrator can do." It is adding a lot of time on each conversion to
have to switch back and forth between the user login and the
Administrator
login. Can anyone point me in the right direction?
Thanks,
Todd Caughey
Harvey Vogel Mfg. Co.
[Non-text portions of this message have been removed]
Useful links for the Yahoo!Groups Vantage Board are: ( Note: You must
have
already linked your email address to a yahoo id to enable access. )
(1) To access the Files Section of our Yahoo!Group for Report Builder
and
Crystal Reports and other 'goodies', please goto:
http://groups.yahoo.com/group/vantage/files/.
<
http://groups.yahoo.com/group/vantage/files/>
(2) To search through old msg's goto:
http://groups.yahoo.com/group/vantage/messages
(3) To view links to Vendors that provide Vantage services goto:
http://groups.yahoo.com/group/vantage/links
Your use of Yahoo! Groups is subject to
http://docs.yahoo.com/info/terms/
Yahoo! Groups Sponsor
ADVERTISEMENT
<
http://rd.yahoo.com/M=267637.4116719.5338353.1261774/D=egroupweb/S=1705
0071
83:HM/A=1754452/R=0/SIG=11ti8tui3/*
http://www.netflix.com/Default?mqso=6
0178
324&partid=4116719> click here
<
http://us.adserver.yahoo.com/l?M=267637.4116719.5338353.1261774/D=egrou
pmai
l/S=:HM/A=1754452/rand=303944212>
Useful links for the Yahoo!Groups Vantage Board are: ( Note: You must
have
already linked your email address to a yahoo id to enable access. )
(1) To access the Files Section of our Yahoo!Group for Report Builder
and
Crystal Reports and other 'goodies', please goto:
http://groups.yahoo.com/group/vantage/files/.
<
http://groups.yahoo.com/group/vantage/files/>
(2) To search through old msg's goto:
http://groups.yahoo.com/group/vantage/messages
(3) To view links to Vendors that provide Vantage services goto:
http://groups.yahoo.com/group/vantage/links
Your use of Yahoo! Groups is subject to the Yahoo! Terms of Service
<
http://docs.yahoo.com/info/terms/> .
[Non-text portions of this message have been removed]
Useful links for the Yahoo!Groups Vantage Board are: ( Note: You must
have
already linked your email address to a yahoo id to enable access. )
(1) To access the Files Section of our Yahoo!Group for Report Builder
and
Crystal Reports and other 'goodies', please goto:
http://groups.yahoo.com/group/vantage/files/.
<
http://groups.yahoo.com/group/vantage/files/>
(2) To search through old msg's goto:
http://groups.yahoo.com/group/vantage/messages
(3) To view links to Vendors that provide Vantage services goto:
http://groups.yahoo.com/group/vantage/links
Your use of Yahoo! Groups is subject to
http://docs.yahoo.com/info/terms/
Yahoo! Groups Sponsor
ADVERTISEMENT
<
http://rd.yahoo.com/M=267637.4116732.5333197.1261774/D=egroupweb/S=1705
007183:HM/A=1754451/R=0/SIG=11t8a5ls2/*http:/www.netflix.com/Default?mqs
o=60178323&partid=4116732> click here
<
http://us.adserver.yahoo.com/l?M=267637.4116732.5333197.1261774/D=egrou
pmail/S=:HM/A=1754451/rand=410118651>
Useful links for the Yahoo!Groups Vantage Board are: ( Note: You must
have already linked your email address to a yahoo id to enable access. )
(1) To access the Files Section of our Yahoo!Group for Report Builder
and Crystal Reports and other 'goodies', please goto:
http://groups.yahoo.com/group/vantage/files/.
<
http://groups.yahoo.com/group/vantage/files/>
(2) To search through old msg's goto:
http://groups.yahoo.com/group/vantage/messages
(3) To view links to Vendors that provide Vantage services goto:
http://groups.yahoo.com/group/vantage/links
Your use of Yahoo! Groups is subject to the Yahoo!
<
http://docs.yahoo.com/info/terms/> Terms of Service.
Tracking #: BB5994785602164FB012A00B802A30D8B00410F3
[Non-text portions of this message have been removed]