A couple of suggestions

1. Turn on auditing on one of the machines with the problem. Go in as a user and try the program. This should tell you in the logs which files do not have permissions set correctly.

2. Run the programs as administrator and see if they call any other programs. If they do those programs also need to be in the list of allowed programs.

3. You may find that the problem is not with files and programs but with the registry. If this is the case use a registry compare tool when you install and see where the registry keys are placed. If they are placed in HK_Local_User for administrator then chances are users aren't going to be able to access them. At that point you have two choices you can give them permissions to those keys or you can copy the keys to HK_local_machine.

-Kit

>>-----Original Message-----
>>From: comprepsrvyahoo.com [mailto:comprepsrvyahoo.com]
>>Sent: Monday, April 08, 2002 8:15 AM
>>To: focus-mssecurityfocus.com
>>Subject: Group Policy denies access to some programs
>>
>>
>>
>>
>>I have a w2000 server running AD which
>>
>>authenticates w2000 Prof. clients. I have Group
>>
>>Policy set up and my users are part of the Domain
>>
>>Users group. When these users try to access
>>
>>certain programs they get errors or access denied
>>
>>errors. I used RUN AS to install and tried installing
>>
>>under my admin account, placing a shortcut in the
>>
>>ALL USERS desktop folder. When I run the
>>
>>programs under Admin, they work fine.
>>
>>
>>
>>So, how can I free certainm programs to run for the
>>
>>users that need them?
>>
>>
>>
>>thanks
>>
>>
>>
>>dp
>>
>>

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]