Norton AV 2004 Win XP power user - PLZ HELP

[thedeliman]

hi guys,
much thanks if you can help me:

i installed norton antivirus on my winxp administrator account, and things seem to work fine. however, when i log into my regular account (a power user account), it KEEPS saying that norton configuration is not complete, and I need administrator privileges to complete this in the "information wizard" (???)

when i change my account to administrator, it's fine, but when i switch it back to power user, the problem pops up again.

this didn't happen with norton antivirus 2003...any thoughts?

 

[Xtremist]

A few ideas...

1) Try uninstalling it and re-installing it from your Power User account only running the app as your admin account. You can generally right-click executables and choose Run as...

2) Try giving your Power User temporary admin rights, log in as that user, see if it goes well, and then remove it from admin.

3) If it's complaining about a specific program that you can identify, you could also just try running that using the Run as... option.

Personally, I'd try #2 first, and then either 1 or 3...

 

[mechBgon]

If that doesn't work, next try giving Power Users at least Modify permissions on Norton/Symantec's folders in Program Files and Program Files\Common Files, and see if it decides it's going to work.

 

[thedeliman]

thanx for the replies.
i had tried #2 previously (temporarily granting power user admin rights), and the problem disappeared...until i removed the admin rights. then back to square one

I will try mechBgon's tips next...

-k

 

[thedeliman]

sorry, the tips from mechBgon didn't work. i gave the power user inherited full control of "program files". still, no dice.

any other tips?
thanks
karl

 

[Bglad]

doesn't norton ask you when you are installing if you want to install for this user or all users? could you have clicked this user only by mistake?

 

[Xtremist]

Man, if none of these suggestions have worked so far, you're probably going to have to do some heavy-duty work. Meaning, it's probably tied to registry permissions. I don't know if you're familar with these tools, but I'd download at least Regmon and probably Filemon (if not for this, it'll serve you well in the future) from Sysinternals Fire up Regmon and filter out any processes you don't want it to capture (since there's always a lot of reg/file activity. Then clear the buffer, run whatever causes the issue, and see what Regmon reports. Especially look for any sort of ACCDENIED (I think is how it returns, something like that) result. If there's nothing there, double-check file permissions by seeing what Filemon says.

A lot of people say you should filter by using the inclusion option. I generally try to filter OUT (exclude) processes I know I don't want (winlogon/explorer/svchost/regmon/filemon/etc..). I've noticed sometimes a program will then launch another app that is causing the real issue and only including results from the main app won't give you much to hope for...

If nothing else, learning how to use File and Regmon will make troubleshooting issues in the future a whole lot easier for ya.

 

[Xtremist]

Oh yeah, one thing I hear a lot of people complaining about these tools is that they can't run them in the accounts (non-admin) that are causing the problems. Well, if they'd just run them AS admin it works fine. You probably would've figured that out easy enough, but now you don't have to worry about it.

 

[thedeliman]

hi,
thx for replies
well- the whole point of running the computer as a power user was to avoid granting full system access all the time.

plus, if network administrators sure as hell don't give admin accounts to everyone, how does norton antivirus handle that?

-k

 

[Xtremist]

They use tools like Regmon and Filemon to figure out the minimal "extra" rights users need to get by.

 

[mechBgon]

Originally posted by: thedeliman

plus, if network administrators sure as hell don't give admin accounts to everyone, how does norton antivirus handle that?

I doubt the network administrators are buying the consumer version of Norton, bro.

 

[Xtremist]

That's true too But there are plenty of poorly written apps that cause similar headache's. Say... PeopleSoft heavy clients for instance...

 

[thedeliman]

hi guys,

ok now i've figured out how to run regmon and filemon under the poweruser account (using the save credentials switch...)

anyway, specifically for xtremist, i'm being bombarded by process requests. how exactly does the exclude filter work- do i filter the process name (for example, qcwlicon.exe:464), or the path (HKLM\SOFTWARE, or HKLM\Software\Intel, etc...)?

more updates on the way...

-k:Q

 

[Xtremist]

I always use the process name. And you only have to enter the first part of it too... Like for services.exe, just enter services. Like:

svchost;regmon;filemon;explorer;lsass;services;winlogon;userinit

That'd exclude all of those (if place in the exclude filter) from appearing...

You will get bombarded for SURE otherwise

You can always see if the include filter give you better luck, but I prefer to cut out the ones I know I don't want instead of assuming I know the exact/only one(s) I DO want...