?
Solved

Add / Remove Programs - Access Denied When Installing AD User Published Software

Posted on 2006-10-24
7
Medium Priority
?
661 Views
Last Modified: 2008-05-29
We have some user published apps in AD so that users can install non licensed apps from Add New Programs section of Add / Remove programs.  It's been working fine for all users until recently, now whenever a non-admin user tries to install an app from Add/ Remove programs, all they get is the error message 'Access is Denied'

Domain is W2k3 SP1 with XP SP2 clients

The GPO for the apps is set to read for Authenticated Users (the apps themselves are displayed in Add / Remove Programs)
The UNC path of where the apps reside is accessible by the users and they can browse the share and it's contents (Share level: Everyone (Full Control); NTFS level: Domain Admins (Full Control); Domain Users (Read / Execute)  

I've also reset the permissions to all child objects from parent directory to enure permissions are correctly set

Event log shows:

Event Type:      Error
Event Source:      Application Management
Event Category:      None
Event ID:      101
Date:            24/10/2006
Time:            14:47:12
User:            Domain\user
Computer:      COMPUTERNAME
Description:
The assignment of application <application> from policy <policy-name>.  The error was : Access is denied.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

Any ideas?

0
Comment
Question by:MPTSupport
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
  • 2
7 Comments
 
LVL 9

Accepted Solution

by:
gopal_krishna earned 1000 total points
ID: 17798213
Essentially, they put a null character into the key name.  The normal regedit tools interpret a null as end of a string, and so NEVER get the name right when trying to delete, change permissions, etc.

www.sysinternals.com has something that will fix this.  http://www.sysinternals.com/Utilities/RegDelNull.html


good luck

regards
Gopal Krishna K
0
 
LVL 9

Expert Comment

by:gopal_krishna
ID: 17798238
0
 
LVL 6

Expert Comment

by:paulhekje
ID: 17801226
is het a computer or user assigned application?

If computer: a computer is not a member of domain users; you should use apply the NTFS permissions to "authenticated users" instead of "Domain users".
0
 
LVL 6

Expert Comment

by:paulhekje
ID: 17801229
(or "domain computers")
0

Featured Post

Simplifying Server Workload Migrations

This use case outlines the migration challenges that organizations face and how the Acronis AnyData Engine supports physical-to-physical (P2P), physical-to-virtual (P2V), virtual to physical (V2P), and cross-virtual (V2V) migration scenarios to address these challenges.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

I don't know if many of you have made the great mistake of using the Cisco Thin Client model with the management software VXC. If you have then you are probably more then familiar with the incredibly clunky interface, the numerous work arounds, and …
I thought I'd write this up for anyone who has a request to create an anonymous whistle-blower-type submission form created using SharePoint 2010 (this would probably work the same for 2013). It's not 100% fool-proof but it's as close as you can get…
This is used to tweak the memory usage for your computer, it is used for servers more so than workstations but just be careful editing registry settings as it may cause irreversible results. I hold no responsibility for anything you do to the regist…
Hi friends,  in this video  I'll show you how new windows 10 user can learn the using of windows 10. Thank you.

752 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question