Solved

Add / Remove Programs - Access Denied When Installing AD User Published Software

Posted on 2006-10-24
7
653 Views
Last Modified: 2008-05-29
We have some user published apps in AD so that users can install non licensed apps from Add New Programs section of Add / Remove programs.  It's been working fine for all users until recently, now whenever a non-admin user tries to install an app from Add/ Remove programs, all they get is the error message 'Access is Denied'

Domain is W2k3 SP1 with XP SP2 clients

The GPO for the apps is set to read for Authenticated Users (the apps themselves are displayed in Add / Remove Programs)
The UNC path of where the apps reside is accessible by the users and they can browse the share and it's contents (Share level: Everyone (Full Control); NTFS level: Domain Admins (Full Control); Domain Users (Read / Execute)  

I've also reset the permissions to all child objects from parent directory to enure permissions are correctly set

Event log shows:

Event Type:      Error
Event Source:      Application Management
Event Category:      None
Event ID:      101
Date:            24/10/2006
Time:            14:47:12
User:            Domain\user
Computer:      COMPUTERNAME
Description:
The assignment of application <application> from policy <policy-name>.  The error was : Access is denied.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

Any ideas?

0
Comment
Question by:MPTSupport
  • 2
  • 2
7 Comments
 
LVL 9

Accepted Solution

by:
gopal_krishna earned 250 total points
ID: 17798213
Essentially, they put a null character into the key name.  The normal regedit tools interpret a null as end of a string, and so NEVER get the name right when trying to delete, change permissions, etc.

www.sysinternals.com has something that will fix this.  http://www.sysinternals.com/Utilities/RegDelNull.html


good luck

regards
Gopal Krishna K
0
 
LVL 9

Expert Comment

by:gopal_krishna
ID: 17798238
0
 
LVL 6

Expert Comment

by:paulhekje
ID: 17801226
is het a computer or user assigned application?

If computer: a computer is not a member of domain users; you should use apply the NTFS permissions to "authenticated users" instead of "Domain users".
0
 
LVL 6

Expert Comment

by:paulhekje
ID: 17801229
(or "domain computers")
0

Featured Post

PRTG Network Monitor: Intuitive Network Monitoring

Network Monitoring is essential to ensure that computer systems and network devices are running. Use PRTG to monitor LANs, servers, websites, applications and devices, bandwidth, virtual environments, remote systems, IoT, and many more. PRTG is easy to set up & use.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
General InfoPath Question - SharePoint 2010/2013 2 71
Is there a SharePoint setup guide for beginners? 18 61
Redesign the sharepoint site. 9 66
Active Directory Audit 18 115
The vision: A MegaMenu for a SharePoint portal home page The mission: Make it easy to maintain. Allow rich content and sub headers as well as standard links. Factor in frequent changes without involving developers or a lengthy Dev/Test/Prod rel…
Sometimes a user will call me frantically, explaining that something has gone wrong and they have tried everything (read - they have messed it up more and now need someone to clean up) and it still does no good, can I help them?!  Usually the standa…
This is used to tweak the memory usage for your computer, it is used for servers more so than workstations but just be careful editing registry settings as it may cause irreversible results. I hold no responsibility for anything you do to the regist…
Hi friends,  in this video  I'll show you how new windows 10 user can learn the using of windows 10. Thank you.

777 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question