DPS Folder Permissions

[ajbritton]

Doing my first installation of this software soon.

 

The 'Installation and Technical guide' states that users need "create, modify and delete" access to a number of folders that, by default, are installed under the Program Files structure. This shoots a big hole through the Software Restriction Policy in at least one school that I know of. Where the rights to execute software are limited to only a few locations, Program Files being one of them.

 

Obviously programs writing data into the Program Files structure is a big no-no. Microsofts guidelines for developers explicitly rules against this behaviour.

 

I could modify the SRP to explicity deny executables in the specific folders, but at least one of them contains program executables!!! Yuck.

 

The KS3 ICT support people suggested that manual installations of the software could be redirected away from Program Files but that they would not support 'transformed' installations deployed via AD.

 

I'm not happy Bob. NOT HAPPY.

 

What's my best way around all this?

[CyberNerd]

RM's advise seems to be to give r+w+x recursivley on the dps install !

 

complain to QCA/NAA about the shoddy state of the software.

http://www.naa.org.uk/

 

 

They seem to be the only people able to kick RM up the ar*e about this, RM have still not looked at issues I reported on APS in march, and the thin client software isn't even going to available for *pilot* until march 07.

[ajbritton]

RM's advise seems to be to give r+w+x recursivley on the dps install !

 

That seems to be the default case when I installed the software on my PC. So it's actually worse than I thought.