Sims.NET Update on Workstation. Only works with Administrator account

[abillybob]

Hey Guys

 

Sorry if this is the wrong place to post this thread. I'm a bit confused, we have a server here that runs Sims backend so when I updated this to the latest version on the Autumn update a while back I then expected Sims to update on all Workstations automatically when users loaded Sims up. This didn't happen and instead would only update if I ran round to every workstation, logged in as Administrator and updated it myself my loading Sims then it worked perfectly fine.

 

I don't want to make staff all Administrators because then we will have big problems like there was before I got here with viruses and such. So how do you guys do it? Is there something in GP I need to change?

 

Thankyou!!!

[creese]

Users need to have full access to the Setups folder. There is a file there called SIMSPerm.bat that will give an idea what access they need.

 

I assume you are using SOLUS 2

[Steve21]

There's a bunch of permissions on the SIMs folder they need to do it, and a few reg keys etc.

 

Either need admin, or just local permission on those folders. There's a bat file by capita to do this.

 

http://www.capitasolus.co.uk/Solus2Help/Workstation_Update.pdf

 

Explains in more detail

 

Steve

[abillybob]

Ok got you. Thing is that everyone has full control over Sims mapped drive and as far as I can see they have all the correct policies in place ! and it's strange because one of the users can upgrade fine whilst everyone else can't yet they all have the same permissions hmm??

[creese]

If you run SIMSApplicationSetup.exe as a user, what happens?

[IrritableTech]

We've basically copied the permissions that SIMSPERM.BAT applies into a GPO. Works a treat.

 

Got caught out a couple of years ago though when the update failed because the exe wanted to update the short cut on the local start menu. Updated to give our staff permission to that short cut and everything has been fine since.

[abillybob]

This... *Scratches head* Has this got something to do with staff not being able to see the C: drive? I don't want to give them access to the C: drive as we have had a lot of issues with this? Any other way?

If you run SIMSApplicationSetup.exe as a user, what happens?

[creese]

This... *Scratches head* Has this got something to do with staff not being able to see the C: drive? I don't want to give them access to the C: drive as we have had a lot of issues with this? Any other way?

 

You also need to give users full access to the root of the Folder this error refers to.

[abillybob]

Is this just a simple Right click - security and add "Everyone" to have full control to that place in the C: drive? The issue being there is that I'd have to go round and do this on every machine any GPO that could do this do you know of?

You also need to give users full access to the root of the Folder this error refers to.

[creese]

This is the SIMPerm.bat which needs editing:

@echo off

 

if "%1" == "" goto :usage

 

SubInAcl /FILE "%WINDIR%\SIMS.INI" /GRANT=%1=F

 

SubInAcl /KEYREG HKEY_LOCAL_MACHINE\SOFTWARE\Classes /GRANT=%1

SubInAcl /KEYREG HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID /GRANT=%1

SubInAcl /KEYREG HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface /GRANT=%1

SubInAcl /KEYREG HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib /GRANT=%1

 

 

if "%ALLUSERSPROFILE%" == "" goto :skip_simsapps

SubInAcl /FILE "%ALLUSERSPROFILE%\Start Menu\Programs\SIMS Applications\*.*" /GRANT=%1=F

SubInAcl /FILE "%ALLUSERSPROFILE%\Start Menu\Programs\SIMS Applications" /GRANT=%1=F

SubInAcl /SUBDIRECTORIES "%ALLUSERSPROFILE%\Start Menu\Programs\SIMS Applications\*.*" /GRANT=%1=F

SubInAcl /SUBDIRECTORIES "%ALLUSERSPROFILE%\Start Menu\Programs\SIMS Applications" /GRANT=%1=F

goto :after_profile_warning

 

:skip_simsapps

echo.

echo ** WARNING: The Environment Variable for All Users Profiles is not set on this pc,

echo ** cannot grant permissions for the SIMS Applications Program Folder.

echo.

 

:after_profile_warning

 

if "%ProgramFiles%" == "" goto :skip_simsdir

SubInAcl /FILE "%ProgramFiles%\SIMS\*.*" /GRANT=%1=F

SubInAcl /FILE "%ProgramFiles%\SIMS" /GRANT=%1=F

SubInAcl /SUBDIRECTORIES "%ProgramFiles%\SIMS\*.*" /GRANT=%1=F

SubInAcl /SUBDIRECTORIES "%ProgramFiles%\SIMS" /GRANT=%1=F

goto :after_simsdir_warning

 

:skip_simsdir

echo.

echo ** WARNING: The Environment Variable for the Program Files Folder is not set on this pc,

echo ** cannot grant permissions to the SIMS Application Folder.

echo.

 

:after_simsdir_warning

goto :end

 

:usage

echo.

echo "Usage simsperm [domain]\ or simsperm [domain]\"

echo.

:end

[creese]

Is this just a simple Right click - security and add "Everyone" to have full control to that place in the C: drive? The issue being there is that I'd have to go round and do this on every machine any GPO that could do this do you know of?

 

Sorry, my expertise is not in Networks, just SIMS.

[abillybob]

No worries mate thankyou for your help. I wouldn't even know what to edit in the simsperm.bat file or where to start "noobish"

Sorry, my expertise is not in Networks, just SIMS.

[creese]

No worries mate thankyou for your help. I wouldn't even know what to edit in the simsperm.bat file or where to start "noobish"

 

 

There are plenty on here who will know the GPO route.....

[SHimmer45]

had a similar problem after an upgrade on a similar release turned out part of the problem was the shortcut to SIMS.

worth adding just your "staff" group as a local admin might fix this as well as a test

[PotNoodleTech]

Using a GPO for your SIMS Workstations you need to go to the following:

 

Computer Configuration > Policies > Windows Settings > Security Settings > File System

 

You need to Add the following entries as "Propigate inheritable permissions to all subfolders and files":

"%ProgramFiles%\SIMS"

"%SystemRoot%\sims.ini"

 

You then need to Edit Security and add your teacher user group(s) in there with "modify" access.

 

That should fix your issue.