Tech Support > Microsoft Windows > Help and Support > How 2 have a permanent RUN AS ADMIN for one specific program ?
How 2 have a permanent RUN AS ADMIN for one specific program ?
Posted by Newsgroup_user on December 24th, 2005


I have this user on my PC (no admin right and don't want him too) who
has 2 games installed and the only way for him to play these 2 games
(Diablo-2 and Empire Earth) is to be an admin.

I used to give him admin rights but I don't trust him.

So how can I set these 2 programs to always RUN AS ADMIN with the
password/logon I will set it up ?

So when he double clicks the game icon shortcut, it will automaticaly
and always RUN AS ADMIN.

How with WIndows XP Pro SP2 ????

Posted by Shenan Stanley on December 24th, 2005


Newsgroup_user wrote:
> I have this user on my PC (no admin right and don't want him too)
> who has 2 games installed and the only way for him to play these 2
> games (Diablo-2 and Empire Earth) is to be an admin.
>
> I used to give him admin rights but I don't trust him.
>
> So how can I set these 2 programs to always RUN AS ADMIN with the
> password/logon I will set it up ?
>
> So when he double clicks the game icon shortcut, it will
> automaticaly and always RUN AS ADMIN.
>
> How with WIndows XP Pro SP2 ????


Why is admin rights "the only way"?

Change the file and directory permissions on the application folders to give
that user (or better yet - that group (users)) rights to read/write to that
folder. Also check the "All Users" profile directory for rights for that
user (better yet - group) and there MIGHT be registry entries - but I doubt
it.

--
Shenan Stanley
MS-MVP
--
How To Ask Questions The Smart Way
http://www.catb.org/~esr/faqs/smart-questions.html


Posted by Bruce Chambers on December 25th, 2005


Newsgroup_user wrote:
> I have this user on my PC (no admin right and don't want him too) who
> has 2 games installed and the only way for him to play these 2 games
> (Diablo-2 and Empire Earth) is to be an admin.
>


I don't believe administrative privileges aren't required to play
Diablo 2; that's a rather old game, now, but I don't recall ever having
to give my son administrative privileges to play it. I'm not familiar
with Empire Earth, though.

> I used to give him admin rights but I don't trust him.
>
> So how can I set these 2 programs to always RUN AS ADMIN with the
> password/logon I will set it up ?
>
> So when he double clicks the game icon shortcut, it will automaticaly
> and always RUN AS ADMIN.
>
> How with WIndows XP Pro SP2 ????
>


You may experience some problems if the software was designed for
Win9x/Me, or if it was intended for WinNT/2K/XP, but was improperly
designed. Quite simply, the application doesn't "know" how to handle
individual user profiles with differing security permissions levels, or
the application is designed to make to make changes to "off-limits"
sections of the Windows registry or protected Windows system folders.

For example, saved data are often stored in a sub-folder under the
application's folder within C:\Program Files - a place where no
inexperienced or limited user should ever have write permissions.

It may even be that the software requires "write" access to parts
of the registry or protected systems folders/files that are not normally
accessible to regular users. (This *won't* occur if the application is
properly written.) If this does prove to be the case, however, you're
often left with three options: Either grant the necessary users
appropriate higher access privileges (either as Power Users or local
administrators), explicitly grant normal users elevated privileges to
the affected folders and/or part(s) or the registry, or replace the
application with one that was properly designed specifically for
WinNT/2K/XP.

Some Programs Do Not Work If You Log On from Limited Account
http://support.microsoft.com/default...;EN-US;q307091

Additionally, here are a couple of tips suggested, in a reply to a
different post, by MS-MVP Kent W. England:

"If your game or application works with admin accounts, but not with
limited accounts, you can fix it to allow limited users to access the
program files folder with "change" capability rather than "read" which
is the default.

C:\>cacls "Program Files\appfolder" /e /t /p users:c

where "appfolder" is the folder where the application is installed.

If you wish to undo these changes, then run

C:\>cacls "Program Files\appfolder" /e /t /p users:r

If you still have a problem with running the program or saving
settings on limited accounts, you may need to change permissions on
the registry keys. Run regedit.exe and go to HKLM\Software\vendor\app,
where "vendor\app" is the key that the software vendor used for your
specific program. Change the permissions on this key to allow Users
full control."


--

Bruce Chambers

Help us help you:
http://dts-l.org/goodpost.htm
http://www.catb.org/~esr/faqs/smart-questions.html

You can have peace. Or you can have freedom. Don't ever count on having
both at once. - RAH

Posted by Newsgroup_user on December 27th, 2005


Well I don't know for Diablo. I mean I don't know where the access
problem is. How could I find out which file/folder/registry its trying
to access but cannot ?

As for Empire Earth, I had written to Sierra about 2 years ago and they
told me its doing a write access to some registry entry. I don't know
one it is as I lost my emails in an HD reformat.

THe idea of giving proper access to a Registry key sould appealing. But
like I said, how can I find out what the game is trying to access ?

Posted by Shenan Stanley on December 27th, 2005


Newsgroup_user wrote:
> Well I don't know for Diablo. I mean I don't know where the access
> problem is. How could I find out which file/folder/registry its
> trying to access but cannot ?
>
> As for Empire Earth, I had written to Sierra about 2 years ago and
> they told me its doing a write access to some registry entry. I
> don't know one it is as I lost my emails in an HD reformat.
>
> THe idea of giving proper access to a Registry key sould appealing.
> But like I said, how can I find out what the game is trying to
> access ?


REGMON and FILEMON

--
Shenan Stanley
MS-MVP
--
How To Ask Questions The Smart Way
http://www.catb.org/~esr/faqs/smart-questions.html



Similar Posts