• We’re currently investigating an issue related to the forum theme and styling that is impacting page layout and visual formatting. The problem has been identified, and we are actively working on a resolution. There is no impact to user data or functionality, this is strictly a front-end display issue. We’ll post an update once the fix has been deployed. Thanks for your patience while we get this sorted.

XP Pro Non Admin Account Write Access

eaadams

Senior member
How do I let programs write to the program files directory when I am using a limited user account in XP Pro?
 
Perhaps you could supply some details about what you're doing. It may be best to tailor your approach to suit the actual application or situation. The more detail you can provide about how you want the OS and apps to behave and the more precise you can be about what type of user and / or user account you wish to control the more likely it is that someone will be able to propose a useful suggestion.

- prosaic
 
I was installing pop file and analog x's visualroute. Both get installed into the program files directory. They both need to write and make changes in their respective folders in that directory and thus I have to move them to the All Users directory in the documents and settings folder and they work fine.

I was just wondering if there is some way to let them work in the program files folder w/o being loged in as admin
 
yes, 2 options:

1. go into the NTFS permissions and specify write access for that user or group for the program files directory
2. add them to the power users group which already has write access to the program files directory.

Pretty GUI aside Win XP Pro was built on the same security principals as Windows NT and 2000.

-Spy
 
Yup, or you could use RUNAS in combination with the /SAVECRED switch so that the more restricted users could run the programs under other user credentials (Power User or Admin).

- prosaic
 
What is a power user group?
What is RUNAS /SAVECRED? a cmd line comand? where does it get put in?
Where are the NTFS permissions?
 
You can find out about RUNAS and its switches by opening a CMD prompt and typing "runas /?" (without the quotes) and hitting the Enter key. You can place runas in the Target field of the shortcut that a given user uses to run the program. You would use the same syntax that's specified for its use at the CMD prompt. When used this way runas starts up the program and runs it under the credentials you supply. If you use the /SAVECRED switch you only have to specify the credentials the first time the shortcut is used in that account. From then on the program will launch in that account without asking for a password, hence you don't have to tell the user an admin or power user password. (Note: You log in as an admin, find the shortcut in the user profile you want to have the ability to run the program, and you change THAT shortcut.)

Power User is one of the user types that is not presented as a choice when creating a new user in Windows XP's default GUI. You can create Power Users (and several other types of users) by using the alternate Users and Passwords dialog. (Start|Run, type in "control userpasswords2", click on OK.)

To be able to control Access Control Lists through the GUI in Windows XP you need to disable Simple File Sharing on the View tab in the Tools|Folder Options dialog of Windows Explorer. Then, when you right-click on a file or folder or drive you'll be able to get into a security/sharing dialog.

I hesitate to suggest the use of permissions (the ACLs) if you're not really familiar with the way NTFS permissions work. Also, changing the Simple File Sharing feature may not be such a great idea if you're already using this system on a local network. Its behavior will change when you change the Simple File Sharing setting.

But, hey, it's all a learning experience. Whatever way you approach this I strongly suggest keeping notes on exactly what you change and how you change it so that you can reverse your changes if you don't like the way things change.

- prosaic
 
Originally posted by: eaadams
What is a power user group?
What is RUNAS /SAVECRED? a cmd line comand? where does it get put in?
Where are the NTFS permissions?
these are questions I would recommend consulting google for the answer.

-Spy
 
Originally posted by: eaadams
I like that runas thing. Just what I wanted I think. I'll give it a try this weekend.

I hope it works out well for you. Please post back to let us know if you have specific questions when you get into it.

- prosaic
 
Back
Top