Tech Support > Microsoft Windows > Security & Administration > securing my folders from other users.
securing my folders from other users.
Posted by popeye on December 27th, 2005


hi. i have set up my user accouts so that i am administrator to prevent step
children accessing my work. however trying to install new programs that wont
allow access to anyone but adminstrator. dont know why. so i have to log
myself on and let them use their programs. but now obviously they have full
access to my work. how can i either load the new programs so they can use
them on their pin
--
thanks. popeye

Posted by Galen on December 27th, 2005


In news:F0BF49A4-BD4E-4256-BEE8-3260E34B8596@microsoft.com,
popeye <popeye@discussions.microsoft.com> had this to say:

My reply is at the bottom of your sent message:

> hi. i have set up my user accouts so that i am administrator to
> prevent step children accessing my work. however trying to install
> new programs that wont allow access to anyone but adminstrator. dont
> know why. so i have to log myself on and let them use their programs.
> but now obviously they have full access to my work. how can i either
> load the new programs so they can use them on their pin


You can create a separate - blank - admin account but they'd still be able
to take ownership if they knew how. One thing you can do is use the run-as
command. Right click the program's .exe or shortcut and select run-as. More
information available here:

Temporary Admin Rights:
http://kgiii.info/windows/XP/securit...in_rights.html

--
Galen - MS MVP - Windows (Shell/User & IE)
http://dts-l.org/
http://kgiii.info/

"We approached the case, you remember, with an absolutely blank mind,
which is always an advantage. We had formed no theories. We were simply
there to observe and to draw inferences from our observations." -
Sherlock Holmes


Posted by Bruce Chambers on December 28th, 2005


popeye wrote:
> hi. i have set up my user accouts so that i am administrator to prevent step
> children accessing my work. however trying to install new programs that wont
> allow access to anyone but adminstrator. dont know why. so i have to log
> myself on and let them use their programs. but now obviously they have full
> access to my work. how can i either load the new programs so they can use
> them on their pin




You may experience some problems if the software was designed for
Win9x/Me, or if it was intended for WinNT/2K/XP, but was improperly
designed. Quite simply, the application doesn't "know" how to handle
individual user profiles with differing security permissions levels, or
the application is designed to make to make changes to "off-limits"
sections of the Windows registry or protected Windows system folders.

For example, saved data are often stored in a sub-folder under the
application's folder within C:\Program Files - a place where no
inexperienced or limited user should ever have write permissions.

It may even be that the software requires "write" access to parts
of the registry or protected systems folders/files that are not normally
accessible to regular users. (This *won't* occur if the application is
properly written.) If this does prove to be the case, however, you're
often left with three options: Either grant the necessary users
appropriate higher access privileges (either as Power Users or local
administrators), explicitly grant normal users elevated privileges to
the affected folders and/or part(s) or the registry, or replace the
application with one that was properly designed specifically for
WinNT/2K/XP.

Some Programs Do Not Work If You Log On from Limited Account
http://support.microsoft.com/default...;EN-US;q307091

Additionally, here are a couple of tips suggested, in a reply to a
different post, by MS-MVP Kent W. England:

"If your game or application works with admin accounts, but not with
limited accounts, you can fix it to allow limited users to access the
program files folder with "change" capability rather than "read" which
is the default.

C:\>cacls "Program Files\appfolder" /e /t /p users:c

where "appfolder" is the folder where the application is installed.

If you wish to undo these changes, then run

C:\>cacls "Program Files\appfolder" /e /t /p users:r

If you still have a problem with running the program or saving
settings on limited accounts, you may need to change permissions on
the registry keys. Run regedit.exe and go to HKLM\Software\vendor\app,
where "vendor\app" is the key that the software vendor used for your
specific program. Change the permissions on this key to allow Users
full control."


--

Bruce Chambers

Help us help you:
http://dts-l.org/goodpost.htm
http://www.catb.org/~esr/faqs/smart-questions.html

You can have peace. Or you can have freedom. Don't ever count on having
both at once. - RAH


Similar Posts