asked on

SBS Permissions

I have a customer that has SBS 2003 with only 3 users. They use Medisoft and Quickbooks 06 Pro from which they maintain the common databases on the server in a shared folder. Every couple of weeks they lose connectivity between their client apps and the shared databases on the server and one or more of the users' permissions get changed. One user has only power user rights on the server and on their local machine and Quickbooks Pro is denying her access. Is this an SBS permissions problem?

heathcote123

In what way to the perissions get changed?

Hve you tried turning on file auditing to see what is changing them?

kdsturg48

ASKER

No I haven't turned on auditing but I will try it and let you know how it goes.

Jeffrey Kane - TechSoEasy

Quickbooks requires that users have LOCAL Administrator rights. This is something that is contentious among security experts, but generally is not a huge issue. The only thing that it really does is allow the users to install software on their machines. This can be countered with a proper Software Restriction Group Policy.

http://www.microsoft.com/technet/prodtechnol/winxppro/maintain/rstrplcy.mspx

There are also some posted work-arounds here:
http://threatcode.com/admin_rights.htm

You should NOT grant Power User rights to those users on the domain.

Jeff
TechSoEasy

kdsturg48

ASKER

I did try giving the user local Admin rights and I also went into the registry and gave rights on the Quickbooks entries. Still couldn't get the domain power user login rights in Quickbooks. So you are saying that local Admins should not be granted power user on the domain? Does that cause problems with programs like Quickbooks?

ASKER CERTIFIED SOLUTION

Jeffrey Kane - TechSoEasy

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

Start Free Trial

kdsturg48

ASKER

The reason I went into the registry was because that was a recommendation I ran across when I looked the error up on the Quickbooks site. Sounds like a good idea to set up a Quickbooks user group. I'll give that a try.