Users unable to open program (Server 2003)

[gloriousglenn]

Hey everybody,

After fruitless Google searching I am having to ask for your help again!

Our Graphics Officer has a new plotter hooked up to the network and to use it there is a utility program that comes on a disk.

The program has been loaded onto the PC and a shortcut icon automatically appears on the desktop. However when a none administrator tries to click on the icon they get the following response:

"Error: You do not have sufficient access to perform this action. Contact your administrator for assistance."

I am assuming that it is something in Group Policies that I have to change for the Graphics Officer to be able to use this program, but I'll be damned if I can find anything!

Is anybody able to help please?

Cheers
Glenn

[localzuk]

Sounds like the software is poorly written and requires local admin rights for the users. Have you tried contacting the manufacturer?

[rh91uk]

Try giving the Graphics Officer permission on the program itself (the program in c:/program files/software folder).

It could be to do with the software restrcition policies; but i'm sure you haven't blocked it!

[gloriousglenn]

Manufacturer haven't been too helpful so far! As per your signature block localzuk, they suggested rebooting and reinstalling drivers. Did that...Didn't work!

The GO doesn't have access to the C:, so I even tried moving the "Program Files" files to the network and redirected the icon shortcut to the new location. I ensured that the GO had sufficient permissions on the folders/files. Tried it with an Administrator login, fine. Tried it with the a couple of different none administrator logins, failed!

Could it be something to do with the users being blocked from initiating .exe files? I'm clutching at straws now!!!!

[IrritableTech]

I'd log on as admin, run the program and run filemon and/or regmon (available in the Edugeek Project - Admin Bar), and see what the program is doing. That will give you an idea what is being accessed.

[bottletop]

Even if the graphics officer doesnt have direct access to the C drive settings the local permissions on that program folder could be a good way to go.

in the schools that I support the c drive is hidden from use users can still access it but are unable to install or uninstall anything. however some apps require the user to have write access to part of the c drive, for temp files or a local data base type of thing.

set it so that authenticated users have modify to start with and then if that falls flat try full control.

again filemon and reg mon are excellent tools.

[gloriousglenn]

Yeah, I mean MS Office, for arguement sake, is loaded onto the C: and he can access that OK!

I gave him Full Control of the relevent files/folders....Still the same error message!!

[leco]

Just another tentative suggestion - could you try "run as ..." or would that compromise admin security?

I know it doesn't really solve the issue but might alleviate the situation in the short term.

Another thought, if it's a network plotter with a networked app, have you tried using it from a different computer?

p.s. Happy birthday

[gloriousglenn]

Thanks leco.....another year older but no wiser!!

'Users' do not have access to 'Run' option.

Also tried running it from another PC. Same problem!

I'm pretty sure that it's something in Group Policy Objects, but I just can't find it!!

[leco]

Thanks leco.....another year older but no wiser!!

Whoever said that older is wiser was fibbing.

'Users' do not have access to 'Run' option.
Also tried running it from another PC. Same problem!

I'm pretty sure that it's something in Group Policy Objects, but I just can't find it!!

Looks like the software needs access to write somewhere. As suggested by others, you probably need to find what is being used and where to, filemon/regmon are your friends here.