Solved

Add / Remove Programs - Access Denied When Installing AD User Published Software

Posted on 2006-10-24
7
649 Views
Last Modified: 2008-05-29
We have some user published apps in AD so that users can install non licensed apps from Add New Programs section of Add / Remove programs.  It's been working fine for all users until recently, now whenever a non-admin user tries to install an app from Add/ Remove programs, all they get is the error message 'Access is Denied'

Domain is W2k3 SP1 with XP SP2 clients

The GPO for the apps is set to read for Authenticated Users (the apps themselves are displayed in Add / Remove Programs)
The UNC path of where the apps reside is accessible by the users and they can browse the share and it's contents (Share level: Everyone (Full Control); NTFS level: Domain Admins (Full Control); Domain Users (Read / Execute)  

I've also reset the permissions to all child objects from parent directory to enure permissions are correctly set

Event log shows:

Event Type:      Error
Event Source:      Application Management
Event Category:      None
Event ID:      101
Date:            24/10/2006
Time:            14:47:12
User:            Domain\user
Computer:      COMPUTERNAME
Description:
The assignment of application <application> from policy <policy-name>.  The error was : Access is denied.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

Any ideas?

0
Comment
Question by:MPTSupport
  • 2
  • 2
7 Comments
 
LVL 9

Accepted Solution

by:
gopal_krishna earned 250 total points
ID: 17798213
Essentially, they put a null character into the key name.  The normal regedit tools interpret a null as end of a string, and so NEVER get the name right when trying to delete, change permissions, etc.

www.sysinternals.com has something that will fix this.  http://www.sysinternals.com/Utilities/RegDelNull.html


good luck

regards
Gopal Krishna K
0
 
LVL 9

Expert Comment

by:gopal_krishna
ID: 17798238
0
 
LVL 6

Expert Comment

by:paulhekje
ID: 17801226
is het a computer or user assigned application?

If computer: a computer is not a member of domain users; you should use apply the NTFS permissions to "authenticated users" instead of "Domain users".
0
 
LVL 6

Expert Comment

by:paulhekje
ID: 17801229
(or "domain computers")
0

Featured Post

Comprehensive Backup Solutions for Microsoft

Acronis protects the complete Microsoft technology stack: Windows Server, Windows PC, laptop and Surface data; Microsoft business applications; Microsoft Hyper-V; Azure VMs; Microsoft Windows Server 2016; Microsoft Exchange 2016 and SQL Server 2016.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

In this article we will discuss all things related to StageFright bug, the most vulnerable bug of android devices.
These days socially coordinated efforts have turned into a critical requirement for enterprises.
This is used to tweak the memory usage for your computer, it is used for servers more so than workstations but just be careful editing registry settings as it may cause irreversible results. I hold no responsibility for anything you do to the regist…
Hi friends,  in this video  I'll show you how new windows 10 user can learn the using of windows 10. Thank you.

896 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

13 Experts available now in Live!

Get 1:1 Help Now