RE: XP software accessibility

["Gabriel O. Zabal" <gabriel () alt126 com>]

Check that the software also as the necessary rights to access the
registry.
If the software has the NTFS ACLs that needs and the Registry ACLs it
will work without problem.
You can use some kind of registry monitor tool to debug the problem.
(like http://www.sysinternals.com/ntw2k/source/regmon.shtml )
Hope it helps

Gabriel Zabal

-----Original Message-----
From: H Jordan High [mailto:jordan () skylist net] 
Sent: Jueves, 19 de Mayo de 2005 05:39 p.m.
To: security-basics () securityfocus com
Subject: XP software accessibility

Hey everyone. I have recently been put in charge of "locking down" the 
Windows XP workstations on our domain. Before everyone had been standard

domain users, but given Administrator privileges for their individual 
machine.

What I have started to do is to install all the necessary software 
logged in as Administrator, and then let them use the software while 
logged in with "Standard User" privileges. Unfortunately I have found 
certain pieces of software that just don't want to work correctly unless

run under Administrator, e.g. Trillian, which will function but not 
display any icons, or other softwares which will error saying "A 
required resource is unavailable". I first attempted to give "Everyone" 
full control over the directories of the softwares giving problems, and 
then did so for all of those program's files in other directories like 
windows, etc. This solved the problem with a couple of them, but the 
vast majority still will not load up.

I do not want to have to give everyone Administrator privileges for 
obvious support reasons, but am going to be forced to if these softwares

will not load and run properly.

Thanks for any help,

Jordan


________________________________________

SKYLIST
Email Marketing Solutions that Deliver
Service You Can Trust

You are receiving this email message
from a representative of SKYLIST, Inc.
13171 Pond Springs Road, Austin, TX 78729
Toll Free: 877.250.2922

To cease all communication with SKYLIST, visit
http://www.skylist.net/unsubscribe
or send an email to unsubscribe () skylist com