Re: XP software accessibility

[Ansgar -59cobalt- Wiechers <bugtraq () planetcobalt net>]

On 2005-05-19 H Jordan High wrote:
> Hey everyone. I have recently been put in charge of "locking down" the
> Windows XP workstations on our domain. Before everyone had been
> standard domain users, but given Administrator privileges for their
> individual machine.
>
> What I have started to do is to install all the necessary software
> logged in as Administrator, and then let them use the software while
> logged in with "Standard User" privileges. Unfortunately I have found
> certain pieces of software that just don't want to work correctly
> unless run under Administrator, e.g. Trillian, which will function but
> not display any icons, or other softwares which will error saying "A
> required resource is unavailable". I first attempted to give
> "Everyone" full control over the directories of the softwares giving
> problems, and then did so for all of those program's files in other
> directories like windows, etc.

That's a really bad idea. You could then as well leave them be local
administrators. Don't do it.

> This solved the problem with a couple of them, but the vast majority
> still will not load up.

That's probably because of insufficient permissions to write to the
registry.

<shameless plug>
http://www.planetcobalt.net/sdb/submission.shtml
</shameless plug>

Regards
Ansgar Wiechers
-- 
"All vulnerabilities deserve a public fear period prior to patches
becoming available."
--Jason Coombs on Bugtraq