+ Post New Thread
Page 1 of 2 12 LastLast
Results 1 to 15 of 16
AV and Multimedia Related Thread, Sibelius Licence Check Out in Technical; Hellooo all! Anyone had a look at the new licence servers for Sibelius? They offer a check out service where ...
  1. #1
    Jamo's Avatar
    Join Date
    Jan 2009
    Posts
    1,349
    Thank Post
    66
    Thanked 175 Times in 147 Posts
    Rep Power
    60

    Sibelius Licence Check Out

    Hellooo all!

    Anyone had a look at the new licence servers for Sibelius? They offer a check out service where a member of staff can effectively use the network licence at home for a predetermined period of time.

    Looks like a great feature, however when checking out a licence a UAC prompt appears which is writing some registry key in HKLM? Anyone come across this and found a workaround without an admin having to dismiss the prompt each time the teacher wants to take Sibelius home?

  2. #2
    british_government's Avatar
    Join Date
    Feb 2009
    Posts
    160
    Thank Post
    24
    Thanked 20 Times in 15 Posts
    Rep Power
    36
    We dont have this issue, we have quite lenient access policies for staff laptops, try and find the sibelius keys in the registry and grant access to staff, should at least help with the problem

  3. #3
    Jamo's Avatar
    Join Date
    Jan 2009
    Posts
    1,349
    Thank Post
    66
    Thanked 175 Times in 147 Posts
    Rep Power
    60
    Quote Originally Posted by british_government View Post
    We dont have this issue, we have quite lenient access policies for staff laptops, try and find the sibelius keys in the registry and grant access to staff, should at least help with the problem
    That was my thought, looked using Procmon and sibelius writes SO MUCH constantly its actually mad!


  4. #4
    rh91uk's Avatar
    Join Date
    Sep 2008
    Location
    UK
    Posts
    871
    Thank Post
    137
    Thanked 132 Times in 114 Posts
    Rep Power
    35
    Just found this too, will be using it for our new MacBookPros

  5. #5
    Jamo's Avatar
    Join Date
    Jan 2009
    Posts
    1,349
    Thank Post
    66
    Thanked 175 Times in 147 Posts
    Rep Power
    60
    Yeah nice feature, interesting implementation though!!

    Documentation on it is sparse the say the least! From what I can see RegTool.exe which does the licencing requires 'elevation'. Prehaps they took their coding skills from those at SIMS.

  6. #6
    british_government's Avatar
    Join Date
    Feb 2009
    Posts
    160
    Thank Post
    24
    Thanked 20 Times in 15 Posts
    Rep Power
    36
    I will see if I can get my hands on one of our staff laptops later and work out the access rights on them and post back. To be honest I have a feeling users are local administrators on the laptops. Anybody tried disabling UAC?

  7. #7
    Jamo's Avatar
    Join Date
    Jan 2009
    Posts
    1,349
    Thank Post
    66
    Thanked 175 Times in 147 Posts
    Rep Power
    60
    I refuse to give up on UAC now I spent so long getting SIMS to update cleanly!! lol

    Yeah I did a ProcMon capture of all the events and have given all users full rights to the HKLM\Software\Avid keys, hopefully will be successful soon!!

  8. #8
    british_government's Avatar
    Join Date
    Feb 2009
    Posts
    160
    Thank Post
    24
    Thanked 20 Times in 15 Posts
    Rep Power
    36
    Quote Originally Posted by Jamo View Post
    I refuse to give up on UAC now I spent so long getting SIMS to update cleanly!! lol
    I was just thinking as a troubleshooting step

  9. #9
    Jamo's Avatar
    Join Date
    Jan 2009
    Posts
    1,349
    Thank Post
    66
    Thanked 175 Times in 147 Posts
    Rep Power
    60
    Right

    Managed to get around the hurdles in the following way for those who are interested:

    We have staff as 'Users' of the laptops so no admin rights etc. The Regtool.exe which sibelius uses to check out the licence requires elevation and no amount of prodding will get it to run without.

    To allow staff users to run the tool you can create a scheduled task which runs 'on demand' with the 'run with highest privileges' ticked. Ensure that the task will run as the 'Group' which staff members belong to in our case Domain\Staff.

    The tasks action is just set to run the Sibelius EXE.

    To allow staff to run the task browse to C:\Windows\System32\Tasks\*NameOfTask* and change the security permissions of the task file to Domain\Staff to read and execute.



    The shortcut to the Sibelius exe can then be changed to:
    schtasks.exe /run /TN "Launch Sibelius"

    That will then allow the users to check licences in and out

  10. #10

    Join Date
    Nov 2012
    Posts
    2
    Thank Post
    0
    Thanked 0 Times in 0 Posts
    Rep Power
    0
    Quote Originally Posted by Jamo View Post

    To allow staff users to run the tool you can create a scheduled task which runs 'on demand' with the 'run with highest privileges' ticked. Ensure that the task will run as the 'Group' which staff members belong to in our case Domain\Staff.

    The tasks action is just set to run the Sibelius EXE.

    To allow staff to run the task browse to C:\Windows\System32\Tasks\*NameOfTask* and change the security permissions of the task file to Domain\Staff to read and execute.



    The shortcut to the Sibelius exe can then be changed to:
    schtasks.exe /run /TN "Launch Sibelius"

    That will then allow the users to check licences in and out
    Hi,

    Great to see someone else with the same problem, we have students using it and are only standard users. We've tried your suggestion but we're still getting the elevation prompt. Are there any other permissions that need changing?

    Ben

  11. #11
    Jamo's Avatar
    Join Date
    Jan 2009
    Posts
    1,349
    Thank Post
    66
    Thanked 175 Times in 147 Posts
    Rep Power
    60
    Quote Originally Posted by Benji2665 View Post
    Hi,

    Great to see someone else with the same problem, we have students using it and are only standard users. We've tried your suggestion but we're still getting the elevation prompt. Are there any other permissions that need changing?

    Ben

    This is my install file Install.bat: (Run as Admin)

    echo Copying the Sibelius Sounds to D: (For Teacher Laptops)...
    REM xcopy "%~dp0Sibelius Sounds\*.*" "D:\Avid\Sibelius Sounds\*.*" /y /E




    echo Creating Registry Entry...
    reg ADD "HKLM\SOFTWARE\AVID\Sibelius Sounds\Sibelius 7 Sounds\ContentPath" /ve /t REG_SZ /d "D:\Avid\Sibelius Sounds\Sibelius 7 Sounds" /f




    echo Creating Scheduled Task for Licence Check Out/In.
    schtasks /create /XML "\\server\packages$\Avid\Sibelius 7.1.2\Launch Sibelius.xml" /TN "Launch Sibelius"


    echo Allowing Task to be Run By Domain\Staff
    icacls "C:\Windows\System32\Tasks\Launch Sibelius" /grant Domain\StaffRX)


    echo Allowing Access to Registry to Domain\Staff
    Powershell.exe -File "\\server\packages$\Avid\Sibelius 7.1.2\ChangeReg.ps1"




    echo Allowing Access to Program Files to Domain\Staff
    icacls "C:\Program Files\Avid" /grant Domain\StaffOI)(CI)F


    echo Done.
    The Changereg PS1 file is:



    $acl = Get-Acl HKLM:\SOFTWARE\Avid
    $rule = New-Object System.Security.AccessControl.RegistryAccessRule ("Domain\Staff","FullControl","ContainerInherit"," None","Allow")
    $acl.SetAccessRule($rule)
    $acl | Set-Acl -Path HKLM:\SOFTWARE\Avid



    The Scheduled task XML is: (Launch Sibelius.xml)

    <?xml version="1.0" encoding="UTF-16"?>
    <Task version="1.3" xmlns="http://schemas.microsoft.com/windows/2004/02/mit/task">
    <RegistrationInfo>
    <Date>2012-09-27T15:27:31.1852617</Date>
    <Author>Domain\MyUsername</Author>
    </RegistrationInfo>
    <Triggers />
    <Principals>
    <Principal id="Author">
    <GroupId>Domain\Staff</GroupId>
    <RunLevel>HighestAvailable</RunLevel>
    </Principal>
    </Principals>
    <Settings>
    <MultipleInstancesPolicy>IgnoreNew</MultipleInstancesPolicy>
    <DisallowStartIfOnBatteries>false</DisallowStartIfOnBatteries>
    <StopIfGoingOnBatteries>true</StopIfGoingOnBatteries>
    <AllowHardTerminate>false</AllowHardTerminate>
    <StartWhenAvailable>false</StartWhenAvailable>
    <RunOnlyIfNetworkAvailable>false</RunOnlyIfNetworkAvailable>
    <IdleSettings>
    <StopOnIdleEnd>true</StopOnIdleEnd>
    <RestartOnIdle>false</RestartOnIdle>
    </IdleSettings>
    <AllowStartOnDemand>true</AllowStartOnDemand>
    <Enabled>true</Enabled>
    <Hidden>false</Hidden>
    <RunOnlyIfIdle>false</RunOnlyIfIdle>
    <DisallowStartOnRemoteAppSession>false</DisallowStartOnRemoteAppSession>
    <UseUnifiedSchedulingEngine>false</UseUnifiedSchedulingEngine>
    <WakeToRun>false</WakeToRun>
    <ExecutionTimeLimit>PT0S</ExecutionTimeLimit>
    <Priority>4</Priority>
    </Settings>
    <Actions Context="Author">
    <Exec>
    <Command>"C:\Program Files\Avid\Sibelius 7\Sibelius.exe"</Command>
    </Exec>
    </Actions>
    </Task>


    Those are the files I use to install and the scheduled task runs the sibelius exe. This is done for staff only, the students run the standard way as they don't check the licence out.

  12. #12
    Jamo's Avatar
    Join Date
    Jan 2009
    Posts
    1,349
    Thank Post
    66
    Thanked 175 Times in 147 Posts
    Rep Power
    60
    O dear Edugeek has decided that some of the permissions from iCacls are sad faces! lol

    It does explain how I felt discovering this though!!!

    If you need more help I can stick the files up on my website.

  13. #13

    Steve21's Avatar
    Join Date
    Feb 2011
    Location
    Swindon
    Posts
    2,689
    Thank Post
    334
    Thanked 515 Times in 483 Posts
    Rep Power
    179
    Quote Originally Posted by Jamo View Post
    O dear Edugeek has decided that some of the permissions from iCacls are sad faces! lol

    It does explain how I felt discovering this though!!!

    If you need more help I can stick the files up on my website.
    Use code tag, not quote (Just for future refererence)

    Code:
     :( :) :D
    Steve

  14. #14
    Jamo's Avatar
    Join Date
    Jan 2009
    Posts
    1,349
    Thank Post
    66
    Thanked 175 Times in 147 Posts
    Rep Power
    60
    Quote Originally Posted by Steve21 View Post
    Use code tag, not quote (Just for future refererence)

    Code:
     :( :) :D
    Steve
    Ah I need to Go Advanced!



    Code:
    :D

  15. #15
    Jamo's Avatar
    Join Date
    Jan 2009
    Posts
    1,349
    Thank Post
    66
    Thanked 175 Times in 147 Posts
    Rep Power
    60
    Quote Originally Posted by Benji2665 View Post
    Hi,

    Great to see someone else with the same problem, we have students using it and are only standard users. We've tried your suggestion but we're still getting the elevation prompt. Are there any other permissions that need changing?

    Ben
    @Benji2665 just noticed you have to add a permission to the local PC to allow your staff users to elevate to near admin when the task runs.

    Add the staff group or the group of staff required to run sibelius (and have checkout enabled) to the Computer/Windows Settings/Security Settings/Local Policies/User Rights Assignment/Impersonate Client After Authentication.

    The checkout will then work for the group you specified in the policy above.

SHARE:
+ Post New Thread
Page 1 of 2 12 LastLast

Similar Threads

  1. Check out this retro bad boy!
    By Little-Miss in forum General Chat
    Replies: 10
    Last Post: 20th January 2011, 09:17 PM
  2. Replies: 1
    Last Post: 14th November 2010, 10:42 PM
  3. Check out Wolfram
    By tech_guy in forum General Chat
    Replies: 20
    Last Post: 5th June 2010, 07:33 AM
  4. Check out my little bro...
    By Little-Miss in forum General Chat
    Replies: 8
    Last Post: 14th February 2010, 12:43 PM
  5. Replies: 0
    Last Post: 30th January 2006, 10:43 AM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •