Security Basics mailing list archives

Re: XP software accessibility


From: PC Sage Information Services <info () pcsage biz>
Date: Thu, 19 May 2005 17:28:45 -0400

Hi Jordan,

You may want to create shortcuts that use 'run as' credentials for the programs that are causing problems. If you create these program shortcuts in an administrative profile, then copy them to the All Users desktop it should help.

On a side note, never give a user administrative access to anything, unless there is a policy in place that supports this. It's the system administrator's job to inform the powers that be as to why it is untenable to provide this level of access in a Windows network. I'm further surprised to find IM is allowed, and Trillian for that matter, which spans different IM networks thus necessitating more open ports or more port forwards required...

S.


On May 19, 2005, at 11:38 AM, H Jordan High wrote:

Hey everyone. I have recently been put in charge of "locking down" the Windows XP workstations on our domain. Before everyone had been standard domain users, but given Administrator privileges for their individual machine.

What I have started to do is to install all the necessary software logged in as Administrator, and then let them use the software while logged in with "Standard User" privileges. Unfortunately I have found certain pieces of software that just don't want to work correctly unless run under Administrator, e.g. Trillian, which will function but not display any icons, or other softwares which will error saying "A required resource is unavailable". I first attempted to give "Everyone" full control over the directories of the softwares giving problems, and then did so for all of those program's files in other directories like windows, etc. This solved the problem with a couple of them, but the vast majority still will not load up.

I do not want to have to give everyone Administrator privileges for obvious support reasons, but am going to be forced to if these softwares will not load and run properly.

Thanks for any help,

Jordan


________________________________________

SKYLIST
Email Marketing Solutions that Deliver
Service You Can Trust

You are receiving this email message
from a representative of SKYLIST, Inc.
13171 Pond Springs Road, Austin, TX 78729
Toll Free: 877.250.2922

To cease all communication with SKYLIST, visit
http://www.skylist.net/unsubscribe
or send an email to unsubscribe () skylist com



Current thread: