Software that wants administrative rights

[HodgeHi]

Hello all,

 

I got some software that wants some admin rights to run. I would prefer to run it from the server really but the software adds a .ini file to the windows folder and apparently needs to read/write to it before it starts the app. There are also a few dlls that get installed into the windows system folder as well.

 

I have added the group to the power users group locally and it runs fine but when not in any of the groups it fails to run, stating that access to the .ini file is denied.

 

What security risk would be apparent if the groups were part of the power users group, and how could i run the software without this need to run as local power users.

 

I have looked at the package in orka and wise (evaluation) but the ini file is not listed. To be honest, i didn't really have a clue how it worked when it started up... :?

[Guest]

Have you tried setting the access permissions on the ini file to all users full access?

[Geoff]

Write a script to put the ini file in the windows directory and set the permissions so users have read/write to it. Do the same trick for the dlls.

 

Set the script to be a startup script for the machines with the software installed. Alternatively if your distributing the software via AD then include the script as a startup script in the GPO that distributes the MSI.

[_Bob_]

Or use the file permissions element in a GPO. I have had to do this for so many applications. Why do they insist on having write access to files they only ever read data from?!?!

[eejit]

Or use the file permissions element in a GPO. I have had to do this for so many applications. Why do they insist on having write access to files they only ever read data from?!?!

 

That sounds interesting - what do you mean by that exactly?

[tosca925]

Yes...... I'd like to know this to?