Application launcher changes student file rights/ permissions on XP

I want to force run changing student file rights/permissions on XP workstation using the Novell Application Launcher.  

Students would be considered users on the XP workstation.  

At present the Novell secure user does not change the XP user file rights/permissions to run an application.
lssavinckiAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

lssavinckiAuthor Commented:
Novell
0
ShineOnCommented:
Ok, NetWare 6.x, WinXP (hopefully PRO) but what version of ZENworks?

Also, what exactly are you trying to accomplish?  You want to change the students' local user workstation account's permissions level, or what?  Permanently or for the duration of a program or something else?

The "run as secure system user" aspect of the Novell Application Launcher, as far as I know, is only for installation-type applications.   It allows the launcher to run the installation as the system user, so an installation can be accomplished regardless of the logged-in user's local account's permission level.  It doesn't apply to execute-only applications.

It's not for actually running an application.  If the executable itself tries to do something that a member of local users doesn't have permissions to do, it won't run.  The users' permissions apply at execution time.

0
alextoftCommented:
If you want to change file permissions to facilitate the smooth running of an application by a restricted user, I do it 1 of 2 ways:

1. Use an MSI - you can integrate file/registry permission changes into those, then create a NAL app from the MSI.
2. Use a NAL app distribution script to call cacls.exe as the system user to change the permissions. eg... #c:\windows\system32\cacls.exe C:\Somewhere /T /E /G Everyone:F ...modifies the C:\Somewhere directory to give the Everyone group recursive full access to it. You can configure both pre and post distribution scripts, so if the files/folders you want to modify are distributed by the NAL app itself, you would use a post-distribution script for example.

0
Do You Have a Trusted Wireless Environment?

A Trusted Wireless Environment is a framework for building a complete Wi-Fi network that is fast, easy to manage, and secure.

lssavinckiAuthor Commented:
I want to change student file permissions to programs files on the C: drive for execution of a program previously installed.  The student user needs more permsiions than were given.

ShineOn: Does this mean I could set file permissions when installing a program but not after?

alextoft: I will ty your suggestions on Monday.

Thanks for the replies.

0
lssavinckiAuthor Commented:
cd L:\
L:\als_force\xcacls "C:\Program Files\GOSolve\gscontent" /t /e /g  users:F /y
rem l:\als_force\xcacls "C:\Program Files\GOSolve\gscontent\*.*" /t /e /g /t users:F /y

The above works if an administrator runs the file.  If a student runs it, ACESS DENIED.

I have Zenworks 4.1
0
ShineOnCommented:
"Does this mean I could set file permissions when installing a program but not after?"

No, it means that the permissions-elevation granted by the "run as system user" option is for installation only, not execution.  You can set file permissions either when installing the program or after, using one or both of alextoft's recommendations.

"The above works if an administrator runs the file.  If a student runs it, ACESS DENIED."

The CACL script should be part of a "run as system user" distribution-type app object, in either the pre- or post- install script box.  That way, it takes on the app installer service's permissions rather than the user's permissions.
0
lssavinckiAuthor Commented:
The CPAU freeware tool eventually solved the problem. It is at http://www.joeware.net/freetools/


This can be closed
0
alextoftCommented:
I've used that before, but it's a bit of a messy solution when the provision already exists within Zenworks to run commands with system privileges.
0
ShineOnCommented:
I don't think they tried it via Zen...
0
alextoftCommented:
*sigh*

Horse, water....
0
Computer101Commented:
PAQed with points refunded (500)

Computer101
EE Admin
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Novell Netware

From novice to tech pro — start learning today.