Security Basics mailing list archives
Re: XP software accessibility
From: Ansgar -59cobalt- Wiechers <bugtraq () planetcobalt net>
Date: Fri, 20 May 2005 14:01:30 +0200
On 2005-05-19 H Jordan High wrote:
Hey everyone. I have recently been put in charge of "locking down" the Windows XP workstations on our domain. Before everyone had been standard domain users, but given Administrator privileges for their individual machine. What I have started to do is to install all the necessary software logged in as Administrator, and then let them use the software while logged in with "Standard User" privileges. Unfortunately I have found certain pieces of software that just don't want to work correctly unless run under Administrator, e.g. Trillian, which will function but not display any icons, or other softwares which will error saying "A required resource is unavailable". I first attempted to give "Everyone" full control over the directories of the softwares giving problems, and then did so for all of those program's files in other directories like windows, etc.
That's a really bad idea. You could then as well leave them be local administrators. Don't do it.
This solved the problem with a couple of them, but the vast majority still will not load up.
That's probably because of insufficient permissions to write to the registry. <shameless plug> http://www.planetcobalt.net/sdb/submission.shtml </shameless plug> Regards Ansgar Wiechers -- "All vulnerabilities deserve a public fear period prior to patches becoming available." --Jason Coombs on Bugtraq
Current thread:
- XP software accessibility H Jordan High (May 19)
- Re: XP software accessibility PC Sage Information Services (May 20)
- Re: XP software accessibility Ansgar -59cobalt- Wiechers (May 20)
- <Possible follow-ups>
- Re: XP software accessibility Doug . Janelle (May 20)
- RE: XP software accessibility Gabriel O. Zabal (May 20)
- XP software accessibility Ben (May 23)