Problem in Programs permission

Dear ,

After restricting the users in my company some programs not working. and sure in this case you need to grant full permission to the same folder of that program. the problem is some of the programs working and some still the same issue.

How i can know to which folders or files i must to grant full permission ?

pls. help urgently..

regards,
BilalshararAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

VatharianCommented:
You have to determine which files are in use by your software. Excellent software to do this is Dependency Walker. (http://www.dependencywalker.com). Point it to executable of a program and let it display list of files used by the program. You don't have to worry about dlls in system folders (like c:/windows), but other like program files\common files, etc. There is some software that requires administrator's rights, but it should be stated in documentation. Most modern software, when it's compatible  with Vista's UAC should run fine without admin rights.
0
BilalshararAuthor Commented:
thanks for your replay

my other issue i am using CACLS script to grant the permissions to the users. now my quistion is if there is any command to let this script to run even if the user already restricted ?
0
VatharianCommented:
To the CACLS utility there is /e switch, which only edits the permissions, instead the normal rewrite. I'm not sure what do you mean by already restricted user. The restricted user cannot grant him/herself permissions to a file, it must by done by administrator-level user. The /e switch should be enough, if you only want to add i.e. write/execute permissions.
0
BilalshararAuthor Commented:
i am using this command through login script. and this script will run in Restricted-level user.this is what i mean and check below an example of my command script

CACLS C;\folder /E /T /C /G "%username%":F

if this script wiil work if it is runing in ristricted mode ? and how i can do it ?
0
Mohamed OsamaSenior IT ConsultantCommented:
I do not believe login scripts will do when run with a limited user credentials, what you need is a machine startup script
as for the dependencies checking, dependency walker should show you only the DLL binary dependencies that are hard coded in your executable, you will still need to find any permissions on register COM+ objects, Data sources ,etc..
for this task use Process monitor aka Procmon
filter only to show your program & look for ACCESS DENIED Messages when run by the limited user profile
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Project Management

From novice to tech pro — start learning today.