We help IT Professionals succeed at work.

SBS Permissions

kdsturg48
kdsturg48 asked
on
Medium Priority
432 Views
Last Modified: 2008-03-17
I have a customer that has SBS 2003 with only 3 users. They use Medisoft and Quickbooks 06 Pro from which they maintain the common databases on the server in a shared folder. Every couple of weeks they lose connectivity between their client apps and the shared databases on the server and one or more of the users' permissions get changed. One user has only power user rights on the server and on their local machine and Quickbooks Pro is denying her access. Is this an SBS permissions problem?
Comment
Watch Question

In what way to the perissions get changed?

Hve you tried turning on file auditing to see what is changing them?

Author

Commented:
No I haven't turned on auditing but I will try it and let you know how it goes.
Jeffrey Kane - TechSoEasyPrincipal Consultant
CERTIFIED EXPERT
Most Valuable Expert 2016
Top Expert 2014

Commented:
Quickbooks requires that users have LOCAL Administrator rights.  This is something that is contentious among security experts, but generally is not a huge issue.  The only thing that it really does is allow the users to install software on their machines.  This can be countered with a proper Software Restriction Group Policy.

http://www.microsoft.com/technet/prodtechnol/winxppro/maintain/rstrplcy.mspx

There are also some posted work-arounds here:
http://threatcode.com/admin_rights.htm

You should NOT grant Power User rights to those users on the domain.

Jeff
TechSoEasy

Author

Commented:
I did try giving the user local Admin rights and I also went into the registry and gave rights on the Quickbooks entries. Still couldn't get the domain power user login rights in Quickbooks. So you are saying that local Admins should not be granted power user on the domain? Does that cause problems with programs like Quickbooks?
Principal Consultant
CERTIFIED EXPERT
Most Valuable Expert 2016
Top Expert 2014
Commented:
kdsturg48,

I don't use the domain power user group... it's really kindof funky and has a couple of "DENY" permission entries... so best to stay clear of it.  You should just create a new security group on the server for QuickBooks and grant that group full access to the server shared folder which has the QBDatabase.  Then, your user should be a member of that group and then should also have local admin rights on whatever workstation they are using.

No reason to go into the registry -- the local admin should have rights by default.  Otherwise, if not you should reinstall the program.

Jeff
TechSoEasy

Not the solution you were looking for? Getting a personalized solution is easy.

Ask the Experts

Author

Commented:
The reason I went into the registry was because that was a recommendation I ran across when I looked the error up on the Quickbooks site. Sounds like a good idea to set up a Quickbooks user group. I'll give that a try.
Access more of Experts Exchange with a free account
Thanks for using Experts Exchange.

Create a free account to continue.

Limited access with a free account allows you to:

  • View three pieces of content (articles, solutions, posts, and videos)
  • Ask the experts questions (counted toward content limit)
  • Customize your dashboard and profile

*This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

OR

Please enter a first name

Please enter a last name

8+ characters (letters, numbers, and a symbol)

By clicking, you agree to the Terms of Use and Privacy Policy.