Software will not run as user with locked down account

Printable View

Show 25 post(s) from this thread on one page

11th December 2009, 11:14 AM
Edu-IT

Software will not run as user with locked down account

I'm trying to get IEP running as a staff member, but it won't. I assume this is due to permissions. I've ran ProcessMonitor to see exactly what the application is doing and got these logs.

Is there anything that blazingly stands out to anyone which would suggest why this software isn't working; is it writing to somewhere that is almost definately going to be locked down?

I'm going to run through the software restriction policies and see if I can find any matches but if there's anything anyone can suggest in the meantime.

Code:

"File Time","Total Events","Opens","Closes","Reads","Writes","Read Bytes","Write Bytes","Get ACL","Set ACL","Other","Path" "0.4329309","2,201","310","584","175","56","691,078","534","0","0","1,076","<Total>" "0.0504972","873","109","214","108","56","116,316","534","0","0","386","C:\Program Files\IEP\IEPWRITER.INI" "0.0203826","211","30","57","30","0","32,880","0","0","0","94","C:\Program Files\IEP\IEPCAPTIONS.INI" "0.0107818","181","60","118","0","0","0","0","0","0","3","C:\Program Files\IEP" "0.0023609","73","8","16","0","0","0","0","0","0","49","C:\WINDOWS\system32\MSCTFIME.IME" "0.1588416","51","2","4","19","0","203,776","0","0","0","26","C:\Program Files\IEP\IEPDLG.exe" "0.0014217","48","5","10","0","0","0","0","0","0","33","C:\WINDOWS\system32\imm32.dll" "0.0008411","39","4","8","0","0","0","0","0","0","27","C:\WINDOWS\system32\uxtheme.dll" "0.0006382","36","4","8","0","0","0","0","0","0","24","C:\WINDOWS\system32\MSCTF.dll" "0.0008056","35","4","8","0","0","0","0","0","0","23","C:\WINDOWS\WINDOWSSHELL.MANIFEST" "0.0006157","34","4","8","0","0","0","0","0","0","22","C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll" "0.0004482","27","3","6","0","0","0","0","0","0","18","C:\WINDOWS\system32\olepro32.dll" "0.0004666","27","3","6","0","0","0","0","0","0","18","C:\WINDOWS\system32\winspool.drv" "0.0248199","26","3","6","1","0","229,376","0","0","0","16","C:\WINDOWS\system32\comctl32.dll" "0.0004569","25","3","6","0","0","0","0","0","0","16","C:\WINDOWS\system32\shell32.dll" "0.0005029","20","2","4","0","0","0","0","0","0","14","C:\WINDOWS\system32\ntdll.dll" "0.0308722","18","2","4","1","0","4,096","0","0","0","11","C:\WINDOWS\system32\gdi32.dll" "0.0003231","18","2","4","0","0","0","0","0","0","12","C:\WINDOWS\system32\kernel32.dll" "0.0003829","18","2","4","0","0","0","0","0","0","12","C:\WINDOWS\system32\ole32.dll" "0.0083581","18","2","4","1","0","8,192","0","0","0","11","C:\WINDOWS\system32\user32.dll" "0.0002930","17","2","4","0","0","0","0","0","0","11","C:\WINDOWS\system32\advapi32.dll" "0.0002890","17","2","4","0","0","0","0","0","0","11","C:\WINDOWS\system32\comdlg32.dll" "0.0003794","17","2","4","0","0","0","0","0","0","11","C:\WINDOWS\system32\MSIMTF.dll" "0.0002754","17","2","4","0","0","0","0","0","0","11","C:\WINDOWS\system32\msvcrt.dll" "0.0003588","17","2","4","0","0","0","0","0","0","11","C:\WINDOWS\system32\oleaut32.dll" "0.0002771","17","2","4","0","0","0","0","0","0","11","C:\WINDOWS\system32\rpcrt4.dll" "0.0514803","17","2","4","0","0","0","0","0","0","11","C:\WINDOWS\system32\rpcss.dll" "0.0003160","17","2","4","0","0","0","0","0","0","11","C:\WINDOWS\system32\shlwapi.dll" "0.0002755","17","2","4","0","0","0","0","0","0","11","C:\WINDOWS\system32\version.dll" "0.0182871","15","2","2","2","0","57,844","0","0","0","9","C:\Program Files\IEP\IEPHead.ini" "0.0017677","15","3","6","0","0","0","0","0","0","6","U:\FilesToCopy" "0.0013536","13","2","2","2","0","1,268","0","0","0","7","C:\Program Files\IEP\21_Head.txt" "0.0011090","13","2","2","2","0","750","0","0","0","7","C:\Program Files\IEP\22_Head.txt" "0.0010602","13","2","2","2","0","894","0","0","0","7","C:\Program Files\IEP\B_Head.txt" "0.0010245","13","2","2","2","0","846","0","0","0","7","C:\Program Files\IEP\E_Head.txt" "0.0033924","13","2","2","2","0","976","0","0","0","7","C:\Program Files\IEP\M_Head.txt" "0.0013208","9","2","4","0","0","0","0","0","0","3","C:\WINDOWS" "0.0001050","9","1","2","0","0","0","0","0","0","6","C:\WINDOWS\system32" "0.0009036","9","3","6","0","0","0","0","0","0","0","U:\" "0.0001572","8","1","2","0","0","0","0","0","0","5","C:\WINDOWS\system32\ctype.nls" "0.0001654","8","1","2","0","0","0","0","0","0","5","C:\WINDOWS\system32\locale.nls" "0.0001325","8","1","2","0","0","0","0","0","0","5","C:\WINDOWS\system32\sortkey.nls" "0.0001374","8","1","2","0","0","0","0","0","0","5","C:\WINDOWS\system32\sorttbls.nls" "0.0001374","8","1","2","0","0","0","0","0","0","5","C:\WINDOWS\system32\unicode.nls" "0.0006632","7","2","2","0","0","0","0","0","0","3","C:\WINDOWS\WinSxS\X86_MICROSOFT.WINDOWS.COMMON-CONTROLS_6595B64144CCF1DF_6.0.2600.2982_X-WW_AC3F9C03" "0.0008045","5","1","2","0","0","0","0","0","0","2","C:" "0.0000936","5","1","2","0","0","0","0","0","0","2","C:\" "0.0001908","5","1","2","0","0","0","0","0","0","2","C:\PROGRAM FILES" "0.0001880","5","1","2","0","0","0","0","0","0","2","C:\Program Files\IEP\students" "0.0294477","5","1","1","2","0","31,816","0","0","0","1","C:\WINDOWS\Prefetch\IEPDLG.EXE-0533B17B.pf" "0.0000933","5","1","2","0","0","0","0","0","0","2","C:\WINDOWS\WinSxS" "0.0000000","3","0","0","0","0","0","0","0","0","3","C:\Program Files\IEP\6_Head.txt" "0.0000000","3","0","0","0","0","0","0","0","0","3","C:\Program Files\IEP\7_Head.txt" "0.0000000","3","0","0","0","0","0","0","0","0","3","U:\Setup.exe" "0.0000000","2","0","0","0","0","0","0","0","0","2","C:\Program Files\IEP\10_Head.txt" "0.0000000","2","0","0","0","0","0","0","0","0","2","C:\Program Files\IEP\11_Head.txt" "0.0000000","2","0","0","0","0","0","0","0","0","2","C:\Program Files\IEP\12_Head.txt" "0.0000000","2","0","0","0","0","0","0","0","0","2","C:\Program Files\IEP\13_Head.txt" "0.0000000","2","0","0","0","0","0","0","0","0","2","C:\Program Files\IEP\14_Head.txt" "0.0000000","2","0","0","0","0","0","0","0","0","2","C:\Program Files\IEP\15_Head.txt" "0.0000000","2","0","0","0","0","0","0","0","0","2","C:\Program Files\IEP\16_Head.txt" "0.0000000","2","0","0","0","0","0","0","0","0","2","C:\Program Files\IEP\17_Head.txt" "0.0000000","2","0","0","0","0","0","0","0","0","2","C:\Program Files\IEP\18_Head.txt" "0.0000000","2","0","0","0","0","0","0","0","0","2","C:\Program Files\IEP\19_Head.txt" "0.0000000","2","0","0","0","0","0","0","0","0","2","C:\Program Files\IEP\20_Head.txt" "0.0000000","2","0","0","0","0","0","0","0","0","2","C:\Program Files\IEP\23_Head.txt" "0.0000000","2","0","0","0","0","0","0","0","0","2","C:\Program Files\IEP\24_Head.txt" "0.0000000","2","0","0","0","0","0","0","0","0","2","C:\Program Files\IEP\25_Head.txt" "0.0000000","2","0","0","0","0","0","0","0","0","2","C:\Program Files\IEP\8_Head.txt" "0.0000000","2","0","0","0","0","0","0","0","0","2","C:\Program Files\IEP\9_Head.txt" "0.0001234","2","0","0","0","0","0","0","0","0","2","C:\Program Files\IEP\IEPDLG.EN" "0.0001184","2","0","0","0","0","0","0","0","0","2","C:\Program Files\IEP\IEPDLG.ENG" "0.0001278","2","0","0","0","0","0","0","0","0","2","C:\Program Files\IEP\IEPDLG.exe.Local" "0.0000000","1","0","0","0","0","0","0","0","0","1","C:\Program Files\IEP\Communication_Skills_Head.txt" "0.0000000","1","0","0","0","0","0","0","0","0","1","C:\Program Files\IEP\EarlyLevel_Head.txt" "0.0000631","1","0","0","0","0","0","0","0","0","1","C:\Program Files\IEP\IEPDLG.EN.DLL" "0.0000676","1","0","0","0","0","0","0","0","0","1","C:\Program Files\IEP\IEPDLG.ENG.DLL" "0.0000000","1","0","0","0","0","0","0","0","0","1","C:\Program Files\IEP\IEPHeadC.txt" "0.0000000","1","0","0","0","0","0","0","0","0","1","C:\Program Files\IEP\IEPHeadL.txt" "0.0000000","1","0","0","0","0","0","0","0","0","1","C:\Program Files\IEP\IEPHeadP.txt" "0.0000000","1","0","0","0","0","0","0","0","0","1","C:\Program Files\IEP\IEPHeNIL.txt" "0.0000000","1","0","0","0","0","0","0","0","0","1","C:\Program Files\IEP\IEPHeNIP.txt" "0.0000000","1","0","0","0","0","0","0","0","0","1","C:\Program Files\IEP\IEPHeSCL.txt" "0.0000000","1","0","0","0","0","0","0","0","0","1","C:\Program Files\IEP\IEPHeSCP.txt" "0.0000000","1","0","0","0","0","0","0","0","0","1","C:\Program Files\IEP\O_head.txt" "0.0001070","1","0","0","0","0","0","0","0","0","1","C:\Program Files\IEP\olepro32.dll" "0.0000000","1","0","0","0","0","0","0","0","0","1","C:\Program Files\IEP\S_head.txt" "0.0000000","1","0","0","0","0","0","0","0","0","1","C:\Program Files\IEP\students\*" "0.0000541","1","0","0","0","0","0","0","0","0","1","C:\Program Files\IEP\winspool.drv" "0.0000000","1","0","0","0","0","0","0","0","0","1","C:\WINDOWS\IEPWriter.INI" "0.0004210","1","1","0","0","0","0","0","0","0","0","C:\WINDOWS\system32\comctl32.dll.124.Config" "0.0001313","1","1","0","0","0","0","0","0","0","0","C:\WINDOWS\system32\comctl32.dll.124.Manifest" "0.0001067","1","1","0","0","0","0","0","0","0","0","C:\WINDOWS\system32\shell32.dll.124.Config" "0.0001047","1","1","0","0","0","0","0","0","0","0","C:\WINDOWS\system32\shell32.dll.124.Manifest" "0.0001224","1","1","0","0","0","0","0","0","0","0","C:\WINDOWS\WindowsShell.Config" "0.0000704","1","1","0","0","0","0","0","0","0","0","C:\winNT" "0.0010164","1","0","0","1","0","2,048","0","0","0","0","U:"
11th December 2009, 11:14 AM
Edu-IT

Registry:

Code:

"Registry Time","Total Events","Opens","Closes","Reads","Writes","Other","Path" "0.0072860","218","107","59","44","8","0","<Total>" "0.0008158","25","13","12","0","0","0","HKCU" "0.0004184","22","11","11","0","0","0","HKCU\Control Panel\Desktop" "0.0007150","16","8","8","0","0","0","HKLM\SOFTWARE\Microsoft\Cryptography\RNG" "0.0014086","8","0","0","0","8","0","HKLM\SOFTWARE\Microsoft\Cryptography\RNG\Seed" "0.0001821","7","0","0","7","0","0","HKCU\Control Panel\Desktop\MultiUILanguageId" "0.0001337","7","7","0","0","0","0","HKCU\Software\Policies\Microsoft\Control Panel\Desktop" "0.0001960","6","3","3","0","0","0","HKLM\Software\Microsoft\Windows NT\CurrentVersion\FontSubstitutes" "0.0004131","6","3","3","0","0","0","HKLM\System\CurrentControlSet\Control\Terminal Server" "0.0001025","4","2","2","0","0","0","HKCU\Keyboard Layout\Toggle" "0.0000440","4","0","0","4","0","0","HKCU\Keyboard Layout\Toggle\Language Hotkey" "0.0000329","4","0","0","4","0","0","HKCU\Keyboard Layout\Toggle\Layout Hotkey" "0.0000993","4","2","2","0","0","0","HKLM\SOFTWARE\Microsoft\CTF\SystemShared" "0.0001587","4","2","2","0","0","0","HKLM\System\CurrentControlSet\Control\Session Manager" "0.0000796","3","0","0","3","0","0","HKCU\Control Panel\Desktop\SmoothScroll" "0.0000589","3","0","0","3","0","0","HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\FontSubstitutes\Arial" "0.0000516","3","1","1","1","0","0","HKLM\Software\Microsoft\Windows NT\CurrentVersion\LanguagePack" "0.0000538","3","0","0","3","0","0","HKLM\System\CurrentControlSet\Control\Terminal Server\TSAppCompat" "0.0000536","2","1","1","0","0","0","HKCR\Interface" "0.0000623","2","1","1","0","0","0","HKCR\Interface\{00020400-0000-0000-C000-000000000046}" "0.0000658","2","1","1","0","0","0","HKCU\SOFTWARE\Microsoft\CTF" "0.0000783","2","2","0","0","0","0","HKCU\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Layers" "0.0000450","2","1","1","0","0","0","HKCU\software\Microsoft\Windows\CurrentVersion\Explorer\Advanced" "0.0000374","2","1","1","0","0","0","HKCU\Software\Microsoft\Windows\CurrentVersion\ThemeManager" "0.0000448","2","1","1","0","0","0","HKLM\SOFTWARE\Microsoft\CTF" "0.0000238","2","0","0","2","0","0","HKLM\SOFTWARE\Microsoft\CTF\SystemShared\CUAS" "0.0000368","2","1","1","0","0","0","HKLM\Software\Microsoft\Ole" "0.0000380","2","2","0","0","0","0","HKLM\SOFTWARE\Microsoft\OLEAUT" "0.0000701","2","1","1","0","0","0","HKLM\Software\Microsoft\Windows NT\CurrentVersion\Compatibility32" "0.0000508","2","1","1","0","0","0","HKLM\Software\Microsoft\Windows NT\CurrentVersion\GRE_Initialize" "0.0000584","2","2","0","0","0","0","HKLM\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\comctl32.dll" "0.0000830","2","2","0","0","0","0","HKLM\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\IEPDLG.exe" "0.0000433","2","1","1","0","0","0","HKLM\Software\Microsoft\Windows NT\CurrentVersion\IME Compatibility" "0.0000704","2","1","1","0","0","0","HKLM\Software\Microsoft\Windows NT\CurrentVersion\IMM" "0.0000808","2","1","1","0","0","0","HKLM\Software\Microsoft\Windows NT\CurrentVersion\Windows" "0.0000464","2","1","1","0","0","0","HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon" "0.0000401","2","1","1","0","0","0","HKLM\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers" "0.0000593","2","1","1","0","0","0","HKLM\SYSTEM\Setup" "0.0000266","1","0","0","1","0","0","HKCU\Control Panel\Desktop\LameButtonText" "0.0000134","1","1","0","0","0","0","HKCU\Software\Borland\Delphi\Locales" "0.0000193","1","1","0","0","0","0","HKCU\Software\Borland\Locales" "0.0000103","1","0","0","1","0","0","HKCU\Software\Microsoft\CTF\Disable Thread Input Manager" "0.0000246","1","1","0","0","0","0","HKCU\SOFTWARE\Microsoft\CTF\LangBarAddIn" "0.0000243","1","0","0","1","0","0","HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\EnableBalloonTips" "0.0000137","1","0","0","1","0","0","HKCU\Software\Microsoft\Windows\CurrentVersion\ThemeManager\Compositing" "0.0000274","1","1","0","0","0","0","HKCU\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers" "0.0000347","1","1","0","0","0","0","HKLM" "0.0000274","1","1","0","0","0","0","HKLM\SOFTWARE\Microsoft\CTF\Compatibility\IEPDLG.exe" "0.0000093","1","0","0","1","0","0","HKLM\SOFTWARE\Microsoft\CTF\EnableAnchorContext" "0.0000210","1","1","0","0","0","0","HKLM\SOFTWARE\Microsoft\CTF\LangBarAddIn" "0.0000104","1","0","0","1","0","0","HKLM\SOFTWARE\Microsoft\Ole\RWLockResourceTimeOut" "0.0000257","1","1","0","0","0","0","HKLM\SOFTWARE\Microsoft\OLEAUT\UserEra" "0.0000262","1","0","0","1","0","0","HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Compatibility32\IEPDLG" "0.0000156","1","1","0","0","0","0","HKLM\Software\Microsoft\Windows NT\CurrentVersion\Diagnostics" "0.0000109","1","0","0","1","0","0","HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\GRE_Initialize\DisableMetaFiles" "0.0000171","1","1","0","0","0","0","HKLM\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\advapi32.dll" "0.0000210","1","1","0","0","0","0","HKLM\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\comdlg32.dll" "0.0000570","1","1","0","0","0","0","HKLM\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\GDI32.dll" "0.0000469","1","1","0","0","0","0","HKLM\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\IMM32.DLL" "0.0000168","1","1","0","0","0","0","HKLM\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\kernel32.dll" "0.0000439","1","1","0","0","0","0","HKLM\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\MSCTF.dll" "0.0000449","1","1","0","0","0","0","HKLM\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\msctfime.ime" "0.0000148","1","1","0","0","0","0","HKLM\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\msvcrt.dll" "0.0000383","1","1","0","0","0","0","HKLM\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\ntdll.dll" "0.0000170","1","1","0","0","0","0","HKLM\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\ole32.dll" "0.0000154","1","1","0","0","0","0","HKLM\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\oleaut32.dll" "0.0000492","1","1","0","0","0","0","HKLM\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\olepro32.dll" "0.0000207","1","1","0","0","0","0","HKLM\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\RPCRT4.dll" "0.0000140","1","1","0","0","0","0","HKLM\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\shell32.dll" "0.0000164","1","1","0","0","0","0","HKLM\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\SHLWAPI.dll" "0.0000204","1","1","0","0","0","0","HKLM\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\user32.dll" "0.0000839","1","1","0","0","0","0","HKLM\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\uxtheme.dll" "0.0000204","1","1","0","0","0","0","HKLM\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\version.dll" "0.0000167","1","1","0","0","0","0","HKLM\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\winspool.drv" "0.0000142","1","0","0","1","0","0","HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\IME Compatibility\IEPDLG" "0.0000135","1","0","0","1","0","0","HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\IMM\Ime File" "0.0000132","1","0","0","1","0","0","HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows\AppInit_DLLs" "0.0000246","1","0","0","1","0","0","HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\LeakTrack" "0.0000405","1","1","0","0","0","0","HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Performance" "0.0000452","1","1","0","0","0","0","HKLM\Software\Microsoft\Windows\CurrentVersion\SideBySide\AssemblyStorageRoots" "0.0000114","1","0","0","1","0","0","HKLM\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers\TransparentEnabled" "0.0000514","1","1","0","0","0","0","HKLM\System\CurrentControlSet\Control\Error Message Instrument" "0.0000512","1","1","0","0","0","0","HKLM\System\CurrentControlSet\Control\SafeBoot\Option" "0.0000131","1","0","0","1","0","0","HKLM\System\CurrentControlSet\Control\Session Manager\CriticalSectionTimeout" "0.0000157","1","0","0","1","0","0","HKLM\System\CurrentControlSet\Control\Session Manager\SafeDllSearchMode" "0.0000106","1","0","0","1","0","0","HKLM\System\CurrentControlSet\Control\Terminal Server\TSUserEnabled" "0.0000134","1","0","0","1","0","0","HKLM\SYSTEM\Setup\SystemSetupInProgress"
11th December 2009, 11:19 AM
tommccann

try making everyone a power user,
fixes so much stuff for me!!
11th December 2009, 11:21 AM
Edu-IT

There doesn't appear to be any writes to areas that the user doesn't have access to. I think it may be that the program wants to run an 'install' when the user first runs it and because this is writing to areas they can't access, it's throwing up.

Power user on the machine is an option. Anyone suggest any negatives against this?
11th December 2009, 11:23 AM
ChrisH

Quote:

Originally Posted by Edu-IT

Power user on the machine is an option. Anyone suggest any negatives against this?

Don't do it! If It's IEP writer does it still install to the root of c: ? Give them permissions over that folder or where ever it is installed.
11th December 2009, 11:23 AM
IrritableTech

Yep, power users will soon install every IE toolbar going. That's just for starters.
11th December 2009, 11:25 AM
Edu-IT

The program is installed, it just doesn't recognise that it is for non-administrators so wants to run again, and of course it can't, and I've not got a clue why it's not recognising that it's not installed.
11th December 2009, 11:35 AM
2097

There is a VBS script you can use which runs a piece of software as 'administrator' on limited accounts . It basically operates the same as right clicking and going to 'run as administrator' , after configuring the script you have to encode it to a VBE to protect the details of the admin account it uses .
Have a google for it ;)
11th December 2009, 11:44 AM
Edu-IT

I've ran the program through from opening to close and exported the log from Process Monitor.

Code:

"File Time","Total Events","Opens","Closes","Reads","Writes","Read Bytes","Write Bytes","Get ACL","Set ACL","Other","Path" "2.5271721","2,738","367","699","249","112","1,569,211","1,068","0","0","1,311","<Total>" "0.4253884","1,328","158","311","158","112","164,636","1,068","0","0","589","C:\Program Files\IEP\IEPWRITER.INI" "0.0508662","211","30","57","30","0","32,880","0","0","0","94","C:\Program Files\IEP\IEPCAPTIONS.INI" "0.1377141","183","60","120","0","0","0","0","0","0","3","C:\Program Files\IEP" "0.0093546","73","8","16","0","0","0","0","0","0","49","C:\WINDOWS\system32\MSCTFIME.IME" "1.3154182","65","2","4","33","0","732,160","0","0","0","26","C:\Program Files\IEP\IEPDLG.exe" "0.0010539","48","5","10","0","0","0","0","0","0","33","C:\WINDOWS\system32\imm32.dll" "0.0008243","39","4","8","0","0","0","0","0","0","27","C:\WINDOWS\system32\uxtheme.dll" "0.0007679","38","4","8","0","0","0","0","0","0","26","C:\WINDOWS\system32\MSCTF.dll" "0.0007449","35","4","8","0","0","0","0","0","0","23","C:\WINDOWS\WINDOWSSHELL.MANIFEST" "0.0006149","34","4","8","0","0","0","0","0","0","22","C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll" "0.0749259","29","3","6","4","0","376,832","0","0","0","16","C:\WINDOWS\system32\comctl32.dll" "0.0004905","27","3","6","0","0","0","0","0","0","18","C:\WINDOWS\system32\olepro32.dll" "0.0005608","27","3","6","0","0","0","0","0","0","18","C:\WINDOWS\system32\winspool.drv" "0.0004297","25","3","6","0","0","0","0","0","0","16","C:\WINDOWS\system32\shell32.dll" "0.0005208","20","2","4","0","0","0","0","0","0","14","C:\WINDOWS\system32\ntdll.dll" "0.0031304","20","4","8","0","0","0","0","0","0","8","U:\FilesToCopy" "0.0513985","19","2","4","2","0","16,384","0","0","0","11","C:\WINDOWS\system32\gdi32.dll" "0.0228133","19","2","4","2","0","143,360","0","0","0","11","C:\WINDOWS\system32\user32.dll" "0.0003484","18","2","4","0","0","0","0","0","0","12","C:\WINDOWS\system32\kernel32.dll" "0.0003428","18","2","4","0","0","0","0","0","0","12","C:\WINDOWS\system32\ole32.dll" "0.0003357","17","2","4","0","0","0","0","0","0","11","C:\WINDOWS\system32\advapi32.dll" "0.0002913","17","2","4","0","0","0","0","0","0","11","C:\WINDOWS\system32\comdlg32.dll" "0.1178786","17","2","4","0","0","0","0","0","0","11","C:\WINDOWS\system32\MSIMTF.dll" "0.0002974","17","2","4","0","0","0","0","0","0","11","C:\WINDOWS\system32\msvcrt.dll" "0.0002935","17","2","4","0","0","0","0","0","0","11","C:\WINDOWS\system32\oleaut32.dll" "0.0003029","17","2","4","0","0","0","0","0","0","11","C:\WINDOWS\system32\rpcrt4.dll" "0.0003738","17","2","4","0","0","0","0","0","0","11","C:\WINDOWS\system32\rpcss.dll" "0.0003086","17","2","4","0","0","0","0","0","0","11","C:\WINDOWS\system32\shlwapi.dll" "0.0002926","17","2","4","0","0","0","0","0","0","11","C:\WINDOWS\system32\version.dll" "0.0005903","16","4","8","0","0","0","0","0","0","4","C:\Program Files\IEP\students" "0.0172710","15","2","2","2","0","57,844","0","0","0","9","C:\Program Files\IEP\IEPHead.ini" "0.0126417","14","1","1","4","0","5,632","0","0","0","8","C:\WINDOWS\system32\riched32.dll" "0.0005154","13","2","2","2","0","1,268","0","0","0","7","C:\Program Files\IEP\21_Head.txt" "0.0005215","13","2","2","2","0","750","0","0","0","7","C:\Program Files\IEP\22_Head.txt" "0.1212547","13","2","2","2","0","894","0","0","0","7","C:\Program Files\IEP\B_Head.txt" "0.0005237","13","2","2","2","0","846","0","0","0","7","C:\Program Files\IEP\E_Head.txt" "0.0005202","13","2","2","2","0","976","0","0","0","7","C:\Program Files\IEP\M_Head.txt" "0.1098057","12","4","8","0","0","0","0","0","0","0","U:\" "0.0025564","9","2","4","0","0","0","0","0","0","3","C:\WINDOWS" "0.0001408","9","1","2","0","0","0","0","0","0","6","C:\WINDOWS\system32" "0.0002713","9","2","4","0","0","0","0","0","0","3","C:\WINDOWS\WinSxS\X86_MICROSOFT.WINDOWS.COMMON-CONTROLS_6595B64144CCF1DF_6.0.2600.2982_X-WW_AC3F9C03" "0.0001476","8","1","2","0","0","0","0","0","0","5","C:\WINDOWS\system32\ctype.nls" "0.0001493","8","1","2","0","0","0","0","0","0","5","C:\WINDOWS\system32\locale.nls" "0.0004636","8","1","2","0","0","0","0","0","0","5","C:\WINDOWS\system32\riched20.dll" "0.0001565","8","1","2","0","0","0","0","0","0","5","C:\WINDOWS\system32\sortkey.nls" "0.0001389","8","1","2","0","0","0","0","0","0","5","C:\WINDOWS\system32\sorttbls.nls" "0.0001499","8","1","2","0","0","0","0","0","0","5","C:\WINDOWS\system32\unicode.nls" "0.0003241","6","1","1","1","0","477","0","0","0","3","C:\WINDOWS\win.ini" "0.0016329","5","1","2","0","0","0","0","0","0","2","C:" "0.0000939","5","1","2","0","0","0","0","0","0","2","C:\" "0.0035789","5","1","2","0","0","0","0","0","0","2","C:\PROGRAM FILES" "0.0315975","5","1","1","2","0","32,224","0","0","0","1","C:\WINDOWS\Prefetch\IEPDLG.EXE-0533B17B.pf" "0.0001030","5","1","2","0","0","0","0","0","0","2","C:\WINDOWS\WinSxS" "0.0006785","4","0","0","0","0","0","0","0","0","4","C:\WINDOWS\system32\config\software.LOG" "0.0000000","4","0","0","0","0","0","0","0","0","4","U:\Setup.exe" "0.0000000","3","0","0","0","0","0","0","0","0","3","C:\Program Files\IEP\6_Head.txt" "0.0000000","3","0","0","0","0","0","0","0","0","3","C:\Program Files\IEP\7_Head.txt" "0.0000000","2","0","0","0","0","0","0","0","0","2","C:\Program Files\IEP\10_Head.txt" "0.0000000","2","0","0","0","0","0","0","0","0","2","C:\Program Files\IEP\11_Head.txt" "0.0000000","2","0","0","0","0","0","0","0","0","2","C:\Program Files\IEP\12_Head.txt" "0.0000000","2","0","0","0","0","0","0","0","0","2","C:\Program Files\IEP\13_Head.txt" "0.0000000","2","0","0","0","0","0","0","0","0","2","C:\Program Files\IEP\14_Head.txt" "0.0000000","2","0","0","0","0","0","0","0","0","2","C:\Program Files\IEP\15_Head.txt" "0.0000000","2","0","0","0","0","0","0","0","0","2","C:\Program Files\IEP\16_Head.txt" "0.0000000","2","0","0","0","0","0","0","0","0","2","C:\Program Files\IEP\17_Head.txt" "0.0000000","2","0","0","0","0","0","0","0","0","2","C:\Program Files\IEP\18_Head.txt" "0.0000000","2","0","0","0","0","0","0","0","0","2","C:\Program Files\IEP\19_Head.txt" "0.0000000","2","0","0","0","0","0","0","0","0","2","C:\Program Files\IEP\20_Head.txt" "0.0000000","2","0","0","0","0","0","0","0","0","2","C:\Program Files\IEP\23_Head.txt" "0.0000000","2","0","0","0","0","0","0","0","0","2","C:\Program Files\IEP\24_Head.txt" "0.0000000","2","0","0","0","0","0","0","0","0","2","C:\Program Files\IEP\25_Head.txt" "0.0000000","2","0","0","0","0","0","0","0","0","2","C:\Program Files\IEP\8_Head.txt" "0.0000000","2","0","0","0","0","0","0","0","0","2","C:\Program Files\IEP\9_Head.txt" "0.0001213","2","0","0","0","0","0","0","0","0","2","C:\Program Files\IEP\IEPDLG.EN" "0.0001199","2","0","0","0","0","0","0","0","0","2","C:\Program Files\IEP\IEPDLG.ENG" "0.0001445","2","0","0","0","0","0","0","0","0","2","C:\Program Files\IEP\IEPDLG.exe.Local" "0.0000000","2","0","0","0","0","0","0","0","0","2","C:\Program Files\IEP\students\ Dec 2009.IEP" "0.0000000","2","0","0","0","0","0","0","0","0","2","C:\Program Files\IEP\students\*" "0.0000000","1","0","0","0","0","0","0","0","0","1","C:\Program Files\IEP\Communication_Skills_Head.txt" "0.0000000","1","0","0","0","0","0","0","0","0","1","C:\Program Files\IEP\EarlyLevel_Head.txt" "0.0000634","1","0","0","0","0","0","0","0","0","1","C:\Program Files\IEP\IEPDLG.EN.DLL" "0.0000640","1","0","0","0","0","0","0","0","0","1","C:\Program Files\IEP\IEPDLG.ENG.DLL" "0.0000000","1","0","0","0","0","0","0","0","0","1","C:\Program Files\IEP\IEPHeadC.txt" "0.0000000","1","0","0","0","0","0","0","0","0","1","C:\Program Files\IEP\IEPHeadL.txt" "0.0000000","1","0","0","0","0","0","0","0","0","1","C:\Program Files\IEP\IEPHeadP.txt" "0.0000000","1","0","0","0","0","0","0","0","0","1","C:\Program Files\IEP\IEPHeNIL.txt" "0.0000000","1","0","0","0","0","0","0","0","0","1","C:\Program Files\IEP\IEPHeNIP.txt" "0.0000000","1","0","0","0","0","0","0","0","0","1","C:\Program Files\IEP\IEPHeSCL.txt" "0.0000000","1","0","0","0","0","0","0","0","0","1","C:\Program Files\IEP\IEPHeSCP.txt" "0.0000000","1","0","0","0","0","0","0","0","0","1","C:\Program Files\IEP\O_head.txt" "0.0000533","1","0","0","0","0","0","0","0","0","1","C:\Program Files\IEP\olepro32.dll" "0.0000581","1","0","0","0","0","0","0","0","0","1","C:\Program Files\IEP\RICHED20.dll" "0.0000539","1","0","0","0","0","0","0","0","0","1","C:\Program Files\IEP\RICHED32.DLL" "0.0000000","1","0","0","0","0","0","0","0","0","1","C:\Program Files\IEP\S_head.txt" "0.0000572","1","0","0","0","0","0","0","0","0","1","C:\Program Files\IEP\winspool.drv" "0.0000000","1","0","0","0","0","0","0","0","0","1","C:\WINDOWS\IEPWriter.INI" "0.0000972","1","1","0","0","0","0","0","0","0","0","C:\WINDOWS\system32\comctl32.dll.124.Config" "0.0000941","1","1","0","0","0","0","0","0","0","0","C:\WINDOWS\system32\comctl32.dll.124.Manifest" "0.0001034","1","1","0","0","0","0","0","0","0","0","C:\WINDOWS\system32\shell32.dll.124.Config" "0.0000964","1","1","0","0","0","0","0","0","0","0","C:\WINDOWS\system32\shell32.dll.124.Manifest" "0.0000992","1","1","0","0","0","0","0","0","0","0","C:\WINDOWS\WindowsShell.Config" "0.0000743","1","1","0","0","0","0","0","0","0","0","C:\winNT" "0.0019617","1","0","0","1","0","2,048","0","0","0","0","U:"

I can only assume it's the C:\Windows stuff that's causing.
11th December 2009, 11:45 AM
gshaw

Quote:

Originally Posted by 2097

There is a VBS script you can use which runs a piece of software as 'administrator' on limited accounts . It basically operates the same as right clicking and going to 'run as administrator' , after configuring the script you have to encode it to a VBE to protect the details of the admin account it uses .
Have a google for it ;)

Or make an AutoIt script to do the same thing and compile to an EXE :)
11th December 2009, 11:46 AM
Edu-IT

Never done that before...?

I think I may just suggest writing IEP's by hand.
11th December 2009, 11:47 AM
JOrdan01070

edu-it i had the same problems so in the end installed it on a share and have a link on the desktop to that share but i had to give full permission to users on that file for it to work. But it does mean that i don't have to install it on any other machine.
11th December 2009, 11:56 AM
Edu-IT

I have to have it running from a virtual CD image for it to function, but even still it doesn't work.

It's not writing to any locations it doesn't have access to, am about to check what registry changes it's making on load.

I assume it'll have access to the likes of C:\WINDOWS\system32\imm32.dll anyway?

Edit: On load it's trying to write to the registry so I imagine this is the issue, staff users cannot right to the registry. Now lies the question of how do I let them write to this?
11th December 2009, 12:20 PM
JOrdan01070

the only thing i can see written to the registry on my machine is

HKEY_CURRENT_USER\Software\Microsoft\Windows\Shell NoRoam\MUICache

value name is S:\IEPV3\IEPWriterV3.exe

value data is IEPWriterV3

HKEY_USERS\S-1-5-21-1258120549-1222005858-40898867-500\Software\Microsoft\Windows\ShellNoRoam\MUICach e

value name is S:\IEPV3\IEPWriterV3.exe

value data is IEPWriterV3

hope this helps
11th December 2009, 12:25 PM
Edu-IT

We're running version 2.

I think an upgrade may be necessary then. See the PM I sent you, just a couple of other questions!

Show 25 post(s) from this thread on one page