From my experience, it depends entirely on the program and the way the
installer configuration was setup.

I've ran into programs that installed a bunch of .OCX files into
\winnt\system32 but never ACL'd the files properly and made them
Administrator only, and thus any user that did not have Administrator access
(local or domain) could not run the application. This was entirely an
installer error from what I gathered.

Other programs require registry access to write/modify certain keys. Your
group policies may not account for this and that could be why the
application is not working.

-----Original Message-----
From: comprepsrvyahoo.com [mailto:comprepsrvyahoo.com]
Sent: Monday, April 08, 2002 11:15 AM
To: focus-mssecurityfocus.com
Subject: Group Policy denies access to some programs

I have a w2000 server running AD which
authenticates w2000 Prof. clients. I have Group
Policy set up and my users are part of the Domain
Users group. When these users try to access
certain programs they get errors or access denied
errors. I used RUN AS to install and tried installing
under my admin account, placing a shortcut in the
ALL USERS desktop folder. When I run the
programs under Admin, they work fine.

So, how can I free certainm programs to run for the
users that need them?

thanks

dp

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]