[sims] SIMSPerm.bat & Win 7

[Rawns]

I'm updating our documentation for the SIMS install process on a Win 7 machine and am wondering if anyone still uses the SIMSPerm.bat file and if it works on a Windows 7 device?

[matt40k]

Don't believe it does, I've been using GP, actually I need to document this.

[techie08]

Don't believe it does, I've been using GP, actually I need to document this.

 

How did you manage to do this? Im almost about to deploy Win 7 to Admin computers.

[sted]

How did you manage to do this? Im almost about to deploy Win 7 to Admin computers.

 

computer config/windows settings/security settings/file system/

add file

point it at your sims folder (might be worth pointing at prog...x86 as well even if you just type it in so its done) and give appropriate groups modify access same with registry and any other folders it needs

[techie08]

Excellent. Would this be the same for FMS or would this be different.

 

Thanks

[sted]

Excellent. Would this be the same for FMS or would this be different.

 

Thanks

 

i assume the same just change the folders as appropriate

[vikpaw]

This is good timing, i just noticed a recent blog, by someone, regarding the GPO settings / script being used for XP, i suggested they come here to share, and also explore options for Win 7. I think more areas are needed for sure, because the increased security is preventing all bar the administrator from upgrading SIMS, at least on our systems.

[benrwb]

I have recently modified the simsperm.bat file so that it could be deployed as a startup script via group policy on our network.

 

vikpaw suggested I share it here in case it's useful.

 

I don't currently have access to any Windows 7 computers, so it might not work on Win 7 due to the increased security. But it does work perfectly (or at least seems to!) on Windows XP.

 

@echo off

if not exist "%ProgramFiles%\SIMS" goto end

if exist "%ProgramFiles%\SIMS\doneperm.txt" goto end

path \\[color="red"]server[/color]\netlogon

SubInAcl /FILE %WINDIR%\SIMS.INI /GRANT=[color="red"]domain\group[/color]=F
SubInAcl /SUBDIRECTORIES "%ProgramFiles%\SIMS\*.*" /GRANT=[color="red"]domain\group[/color]=F
SubInAcl /KEYREG HKEY_LOCAL_MACHINE\SOFTWARE\Classes /GRANT=[color="red"]domain\group[/color]
SubInAcl /KEYREG HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID /GRANT=[color="red"]domain\group[/color]
SubInAcl /KEYREG HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface /GRANT=[color="red"]domain\group[/color]
SubInAcl /KEYREG HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib /GRANT=[color="red"]domain\group[/color]

echo y >"%ProgramFiles%\SIMS\doneperm.txt"

:end

Notes: SubInAcl.exe must be copied to the netlogon folder.

Obviously replace the bits in red with values specific to your network.

 

To deploy via group policy...

(Instructions for Windows Server 2003)

 

1. Open Active Directory Users and Computers

2. Right-click the domain and choose Properties

3. Group Policy

4. Edit the "Domain Computers" Policy

5. Go to Computer Configuration > Windows Settings > Scripts (Startup/Shutdown)

6. Startup scripts

7. Save the above batch file into the correct folder

(which can be found by clicking 'Show files') then Add it.

[Stuart_C]

I just got the list of what security to apply from the SIMS perm.bat then set it via GP. So I now no longer have to worry about setting it. I did need to modify things for the 64Bit OS though program files (x86)...

[vikpaw]

Aren't you going to share your mods?

[sted]

Aren't you going to share your mods?

at a guess as well as adding c:\program files\sims they added c:\program files x86\sims

[matt40k]

Won't need to worry about permissions soon thanks to SOLUS3, even for FMS!!

[vikpaw]

Won't need to worry about permissions soon thanks to SOLUS3, even for FMS!!

 

But it can still sort out permissions to allow safe running no? Aren't there some areas you need to write to in order to run SIMS ok or is that all in profile / documents folders now.

[matt40k]

SIMS I can run as a normal Windows User, no extra rights. Only problem is when you redirect the My Documents and they don't have enough rights to it (fair enough).

 

FMS - I got a phone call from Capita who said how to fix it so a normal Windows User can use FMS without any extra permissions, just need to try it out (ie I need to find a Win7 machine I can play with).