One thing that you may have to do is allow the users to have access to their
local machines as admins. Some programs, and in specific MS Office, need
Admin privileges to execute the first time. The reason for this is that
some of the components are initialized when the program is first run that
may interact with the registry or may attempt to modify dll's or ini files.
The problem inherent in granting this sort of access is the users can
install ANYTHING on their machine without you knowing about it. One thing I
did notice though, is that after granting the user access to their local
machine as an admin is that once they access the program for the first time,
I was able to remove the local admin rights and everything was fine. You
may want to give this a try and see if it will work.

Good luck,

Bejon

-----Original Message-----
From: comprepsrvyahoo.com [mailto:comprepsrvyahoo.com]
Sent: Monday, April 08, 2002 8:15 AM
To: focus-mssecurityfocus.com
Subject: Group Policy denies access to some programs

I have a w2000 server running AD which authenticates w2000 Prof. clients.
I have Group Policy set up and my users are part of the Domain Users
group. When these users try to access certain programs they get errors or
access denied errors. I used RUN AS to install and tried installing under
my admin account, placing a shortcut in the ALL USERS desktop folder. When
I run the programs under Admin, they work fine. So, how can I free
certainm programs to run for the users that need them? thanks dp

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]