Security Basics mailing list archives

XP software accessibility


From: Ben <ben () gdiyellowpages com>
Date: Fri, 20 May 2005 16:03:06 -0400

Hi,
SysInternals (Sysinternals.com) makes quite a few monitoring tools that you can use to see what files and registry keys are being accessed in Windows. I have used this many times to fix software that didn't run correctly with limited user rights. You will have to install these programs on the machine in question, login as user, turn everything off that you can (to avoid TMI from the monitoring progs), then start the filemon and regmon tools, then run the program to the point of error and close it, then stop the monitoring. You will then be able to use the information to grant proper registry and file permissions and allow these programs to run under regular user credentials, with specific elevated access. Just pay attention to be sure your not having to grant user rights to admin/system areas of the file system or registry. It can be cumbersome to complete, to MUCH better than granting admin, or even power user, rights to users. Also, I agree with what others have said as far as trying to explain the risk and limit the use of programs that are not NECESSARY for business purposes. Hope that helps.

Ben

Current thread: