FAQ:  Giving non-administrative users of Windows 2000 and XP access to ATM Deluxe

In order for a restricted user to launch the ATM control panel and add or remove fonts, they will need to have access to the following registry keys:
HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Adobe Type Manager
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\Current Version\Type 1 Installer\Type 1 Fonts
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\Current Version\Fonts
Adapted from material originally posted by Lance K

Manuel,
Unfortunately, I wasn't able to do this... I had to use advanced permissions on the %SYSTEMROOT% folder so that the specific group of users I have are the only ones allowed to write to it. It uses a temp file, and writes it to c:\winnt while it is working with it (which is only when ATM is writing changes to the atmreg.atm file at application close time)... so your user(s) will have to have only the "Create Files/Write Data" permissions to the whole of the winnt folder (and modify permissions on the atmreg.atm file) to use atm. I had to use a utility that traces thread, file & Registry access to determine how to make this work. This is the ONLY way, ATM is hard-coded to use atmreg.atm in the system root folder (as well as to use the temp file in the system root folder), and it needs create files/write data permissions on the system root folder to use the temp file. I hope this makes sense to you... if not, e-mail me [email protected] and I will send you my document for fixing the problem.
Good Luck
--Joe

Similar Messages

  • Allow a windows non-administrator user to run cmd.exe as administrator without sharing administrator password with the user

    I have standalone Windows 2003 and 2008 Oracle database servers (they are not in a Windows domain environment ). The Oracle DBAs can perform all their routine activities from command line with administrator privileges. For this i've to either share administrator
    user password with the Oracle DBAs or add their windows login user to Administrators group. If i can give the DBA user permission to run windows command prompt without sharing administrator password, i can give them non-administrator login access to Windows
    2003/2008 server. Normally when a non administrator user would try to run a program as administrator on Windows 2008, the user is prompted to input administrator username/password. Is it possible to give non-admin user access to run a program/application (cmd.exe
    in this case) on Windows 2003/2008 without sharing administrator credentials with them?

    With the OTORISER application I developed, normal users can run applications with admin privilege …  
    Otoriser is totally free ! Applications, mmc consoles, control panel cpl files can be run under admin and system context with Otoriser. Let’s say you donot want your users to be admin in their machines, but want them to run some applications with admin rights.
    If this is the case then you are on the right blog.
    There are two components for Otoriser. Management and client components. There are no complex implementation and no frustrating steps to be performed. Within 10 minutes you can start testing the results
    After you download the setup files, install client components in the client by running it directly (or any deployment method you have), it will take about 5 seconds to install it. Then, let’s say you want your user to change system properties of the machine.
    With the tool provided in Admin package produce the hash of system.cpl file and enter that hash into the group policy (details are provided in documentation). When policies are applied for that user then he or she can run that control panel applet under admin
    context but donot forget that the user is still an ordinary user.
    download link :
    http://burakuysaler.wordpress.com/2013/02/21/with-the-otoriser-application-that-i-developed-normal-users-can-run-applications-with-admin-priviledges

  • Performance Tuning for non Administrator users

    Hi,
    Since i had performance issue on my cube i have followed tutorial:
    http://www.oracle.com/technology/obe/obe_bi/bi_ee_1013/aggpersist/aggpersist.htm
    to obtain best performance using aggregate tables.
    All works, but opening NQSQuery.log i've seen that only Administrator User uses aggregate tables, and not other users. In fact:
    Administrator User:
    WITH
    SAWITH0 AS (select sum(T209.SPESA_PRES0000004A) as c1,
    T202.Sesso00000057 as c2
    from
    SA_Nominat00000090 T202, (Aggregated table)
    ag_Fatti T209 (Aggregated table)
    where ( T202.Nominativo0000005F = T209.Nominativo0000005F )
    group by T202.Sesso00000057)
    select distinct SAWITH0.c2 as c1,
    SAWITH0.c1 as c2
    from
    SAWITH0
    Other user:
    WITH
    SAWITH0 AS (select sum(T32.SPESA_PRESCRITTA) as c1,
    T32.ASSISTITO__SESSO_LVLDSC as c2,
    T32.TEMPO_DIM_ANNO_LVLDSC as c3
    from
    STORDO_CUBE_CUBEVIEW T32
    where ( T32.TEMPO_DIM_LEVEL = 'ANNO' and T32.ASSISTITO__LEVEL = 'SESSO' )
    group by T32.TEMPO_DIM_ANNO_LVLDSC, T32.ASSISTITO__SESSO_LVLDSC)
    select distinct SAWITH0.c2 as c1,
    SAWITH0.c3 as c2,
    SAWITH0.c1 as c3
    from
    SAWITH0
    How can I do to obtain a query similar even for a non Administrator User?
    However, in your opinion, to have a TOTAL level for all dimensions, can me help to improve performances?
    p.s. In addition, aggregate measure value is wrong. It's 900, but it must be 300, infact the total of all rows in fact table is 300 and not 900. In this way, even the report result is wrong!!! Why?
    Thanks
    Giancarlo
    Edited by: user5380662 on 10-mag-2010 4.44
    Edited by: user5380662 on 10-mag-2010 5.47

    Hi daqstudent,
    What versions of Windows (with service packs), LabVIEW, and the DAQmx
    drivers do you have?  It looks like this issue should have been
    fixed in DAQmx version 7.4.  As a work-around, you should be able
    to use the Measurement & Automation Explorer (MAX) to create
    DAQmx Global Channels, and then use those saved Global Channels in LabVIEW. The
    configuration for DAQmx Global Channels in MAX is the same as that of
    the DAQ Assistant in LabVIEW. The only experience lost is seeing the
    actual DAQ Assistant icon in LabVIEW.
    Thaison V

  • App is getting damaged when I replace it as non-administrative user

    Hey people,
    When I want to update e.g. VLC Player, as an administrator, it is simple: I just download the dmg, mount it and drop the new version of the VLC.app into the Applications folder to replace the old VLC.app. Few days ago I created a new admin account and changed my old account  to normal user. If I want to install new software that I did not use before, everything works as expected: when I drop an .app package into the Applications folder, I need to type in the admin login and password to allow this operation, then the package will be copied and I can start the new app.
    My problem:
    If I want to update the software by replacing the app as non-administrative user, the system first will promt me to keep both files, replace an older one or to stop - so far so good. BUT, when I select to replace, the copying process actually begins before the administrator prompt and it results in corrupted file. I also tried to create a new user account. So then I need first to remove the broken app (admin prompt once again) and then to install the new one (3rd admin prompt).
    I attached some screenshots to visualize the issue. I have the same issue on two different macs with different  user/admin names. I hope you have any idea how can it be fixed.
    1. I download the package:
    2. Mount the package:
    3. Drag the VLC app to the Applications folder (selecting >Authenticate in the prompt)
    4. Copy prompt (>Replace):
    5. Authenticate with administrative user
    6. Error message:
    7. Corrupted file:

    Thanks, you helped me. I had gotten hung up on '--user = <vboxuser>' in the ExecStart line, which works for one of my other services, but not this one.

  • User Logon Name (pre-Windows 2000) and Domain Name Don't have the same Value

    Hi
    is it possible to have User Logon Name (pre-Windows 2000) and Domain Name with different value?
    Exemple:
    domain name domain1.com
    and User Logon Name (pre-Windows 2000) Domain2\user

    If you have trust in place, then also you can use trusted domain name to login from trustee domain. Also, UPN suffix can be added.
    http://technet.microsoft.com/en-us/library/cc773178%28v=ws.10%29.aspx
    Awinish Vishwakarma - MVP
    My Blog: awinish.wordpress.com
    Disclaimer This posting is provided AS-IS with no warranties/guarantees and confers no rights.

  • Install Acrobat 7 and CS2 applications - running Windows 2000 and IE 6

    need to install replacment Acrobat 7 and CS2 applications - running Windows 2000 and IE 6. Any problems with this?

    http://web.archive.org/web/20070203090721/http://www.adobe.com/products/creativesuite/syst emreqs.html

  • Why will a stand alone executalbe with an installer work on windows 2000 and crashes on windows xp professional?

    When I run the setup.exe file on a Windows 2000 system it installs properly, but the same file run on a XP Professional system I get an error stating Fatal Error: Installation ended prematurely because of an error.
    See here for more information on the specific installer I'm trying to use.
    In fact I get this error for any stand alone executable I try to install on any XP machines. I am using LV 7.1. Is there a way to manually install eve
    rything?
    Thanks

    Sure you can Install a lv application manually. just copy the exe-file,
    support files in a folder. For the runtimeengine just copy the file
    lvrte.dll in the folder of your application or in the windows system folder.
    Hope that helps, Niko
    BB Herman wrote:
    > Why will a stand alone executalbe with an installer work on windows
    > 2000 and crashes on windows xp professional?
    >
    > When I run the setup.exe file on a Windows 2000 system it installs
    > properly, but the same file run on a XP Professional system I get an
    > error stating Fatal Error: Installation ended prematurely because of
    > an error.
    >
    > See
    > HREF="http://exchange.ni.com/servlet/ProcessRequest?RHIVEID=101&RPAGEID=135&HOID=50650000000800000...
    for more information on the specific installer I'm trying to
    > use.
    >
    > In fact I get this error for any stand alone executable I try to
    > install on any XP machines. I am using LV 7.1. Is there a way to
    > manually install everything?
    >
    > Thanks

  • Hi, anyone can tell me how to open a CD - ROM FOR windows 2000 and XP Version 1.1b Software by Softwire LTD?

    Hi, anyone can tell me how to open a CD - ROM FOR windows 2000 and XP Version 1.1b Software by Softwire LTD?

    Then you will need a copy of XP running in a virtual machine, or possibly bootcamp depending what Mac OS you're currently on.
    Rather expensive way to do it, but if it's Windows software, you need Windows.

  • Unable to buildclient and to buildserver on windows 2000 and Tuxedo 8

    Hi,
    I am still trying to make the simpapp sample run on my laptop (windows 2000) and
    I still don't manage to do so.
    Currently, I am trying to compile with the tuxedo tools (buildclient and buildserver)
    and this doesn't work at all.
    It seems that a library is missing.
    buildserver -o simpserv -f simpserv.c -s TOUPPER
    cl /MD -I"%TUXDIR%"\include -Fesimpserv BS-388.c simpserv.c
    "%TUXDIR%"\lib\libtux.lib "%TUXDIR%"\lib\libbuft.lib
    "%TUXDIR%"\lib\libfml.lib "%TUXDIR%"\lib\libfml32.lib
    "%TUXDIR%"\lib\libengine.lib wsock32.lib kernel32.lib advapi32.lib
    user32.lib gdi32.lib comdlg32.lib winspool.lib -link -implib:BS-388.lib
    CMDTUX_CAT:4180: ERROR: can't execute cl /MD
    -I"%TUXDIR%"\include -Fesimpserv
    BS-388.c simpserv.c
    "%TUXDIR%"\lib\libtux.lib
    "%TUXDIR%"\lib\libbuft.lib
    "%TUXDIR%"\lib\libfml.lib
    "%TUXDIR%"\lib\libfml32.lib
    "%TUXDIR%"\lib\libengine.lib
    wsock32.lib kernel32.lib advapi32.lib user32.lib gdi32.lib comdlg32.lib
    winspool.lib
    -link -implib:BS-388.lib
    What is this 'cl' command which is alwasys called in the buildserver and buildclient
    Thanx in advance for your help.
    Best Regards
    Jean-Guillaume LALANNE

    never mind...
    Posts from other threads in this group suggested using VC++'s vcvars.bat for setup.
    That solves the stdio problem, buildclient now works for me.
    "Rod" <[email protected]> wrote:
    >
    Same platform, also unable to buildclient. I put VC++ bin and Common/MSDev98/Bin
    (to eliminate a complaint about MSPDB60.dll)in my path, but buildclient
    replies with:
    simpcl.c(13) : fatal error C1083: Cannot open include file: 'stdio.h': No
    such file
    or directory
    I tried setting CFLAGS="-Ic:\Program Files\Microsoft Visual Studio\...",
    and discovered
    that buildclient apparently can't handle directory names with spaces. Different
    variations of quoting, with single and double quotes in various positions,
    evenutally
    got rid of the
    Command line warning D4024 : unrecognized source file type 'Files\Microsoft',
    object
    file assumed
    warnings, but it still can't find stdio.h:
    TUXNT_CAT:77: ERROR: Can't execute cl /MD -I"c:\Program Files\Microsoft
    Visual Studio\VC89\Include"
    -I"%TUXDIR%"\include -Fesimpcl simpcl.c "%TUXDIR%"\lib\libtux.lib "%TUXDIR%"\lib\libbuft.lib
    "%TUXDIR%"\lib\libfml.lib "%TUXDIR%"\lib\libfml32.lib "%TUXDIR%"\lib\libengine.lib
    wsock32.lib kernel32.lib advapi32.lib
    user32.lib gdi32.lib comdlg32.lib winspool.lib -link -implib:BC-75c.lib
    I was able to compile the client from inside VC++ and make an executable,
    but the
    server executable needs an atmi main.
    So, I'm still stuck without an stdio.h....
    Scott Orshan <[email protected]> wrote:
    That's the C compiler (Microsoft Visual C++). To develop applications,
    you need a compiler. Make sure that it is in your PATH.
    jeangui wrote:
    Hi,
    I am still trying to make the simpapp sample run on my laptop (windows2000) and
    I still don't manage to do so.
    Currently, I am trying to compile with the tuxedo tools (buildclient
    and
    buildserver)
    and this doesn't work at all.
    It seems that a library is missing.
    buildserver -o simpserv -f simpserv.c -s TOUPPER
    cl /MD -I"%TUXDIR%"\include -Fesimpserv BS-388.c simpserv.c
    "%TUXDIR%"\lib\libtux.lib "%TUXDIR%"\lib\libbuft.lib
    "%TUXDIR%"\lib\libfml.lib "%TUXDIR%"\lib\libfml32.lib
    "%TUXDIR%"\lib\libengine.lib wsock32.lib kernel32.lib advapi32.lib
    user32.lib gdi32.lib comdlg32.lib winspool.lib -link -implib:BS-388.lib
    CMDTUX_CAT:4180: ERROR: can't execute cl /MD
    -I"%TUXDIR%"\include -Fesimpserv
    BS-388.c simpserv.c
    "%TUXDIR%"\lib\libtux.lib
    "%TUXDIR%"\lib\libbuft.lib
    "%TUXDIR%"\lib\libfml.lib
    "%TUXDIR%"\lib\libfml32.lib
    "%TUXDIR%"\lib\libengine.lib
    wsock32.lib kernel32.lib advapi32.lib user32.lib gdi32.lib comdlg32.lib
    winspool.lib
    -link -implib:BS-388.lib
    What is this 'cl' command which is alwasys called in the buildserver
    and
    buildclient
    Thanx in advance for your help.
    Best Regards
    Jean-Guillaume LALANNE

  • Separate between windows 2000 and xp

    Hi!,
    In Zenworks 3.2 I want to filter between Windows 2000 and Windows xp
    machines. As a result I want Windows 2000 machines to be imported in a
    different container then Windows xp machines, but unfortunately windows
    2000 en windows xp are on one tab. How do i separate?
    Do i need zen 4 or some kind of snapin?
    TIA
    Peter
    Peter Taal
    HagaZiekenhuis,locatie Rode Kruis
    Afdeling Informatisering en Automatisering
    mailto:[email protected]

    Okay Thanks for your reply.
    But what about nal objects? For example Microsoft patches. You don't want Xp
    patches to be rolled out on 2000 machines. So filtering on file existence is
    the only way?? for example C:\windows\explorer.exe for xp and
    C:\winnt\explorer.exe for 2000.
    Deyan Stoykov schreef:
    > In order to do that you need 2 instances of the workstation import
    > service, each running on a different server and pointing to a different
    > server policy package object. Then point 2000 stations to first server's
    > hostname/ipaddress and xp stations to second server's
    > hostname/ipaddress. You can do that manually or you can use 2
    > application objects to populate the hosts file or the registry entry at
    > "HKLM\Software\Novell\Workstation Manager\Import Server" - one for 2000
    > + one for XP and set the system requirements -> operating system for
    > both objects respectively.
    >
    > HTH
    > Deyan
    >
    > P.Taal wrote:
    > > Hi!,
    > >
    > > In Zenworks 3.2 I want to filter between Windows 2000 and Windows xp
    > > machines. As a result I want Windows 2000 machines to be imported in a
    > > different container then Windows xp machines, but unfortunately windows
    > > 2000 en windows xp are on one tab. How do i separate?
    > >
    > > Do i need zen 4 or some kind of snapin?
    > >
    > > TIA
    > >
    > > Peter
    > >
    > > --
    > >
    > > Peter Taal
    > > HagaZiekenhuis,locatie Rode Kruis
    > > Afdeling Informatisering en Automatisering
    > > mailto:[email protected]
    Peter Taal
    HagaZiekenhuis,locatie Rode Kruis
    Afdeling Informatisering en Automatisering
    mailto:[email protected]

  • Windows 2000 and ODBC errors

    I received "ODBC call failed" errors with client machines running Windows 2000 and Oracle 7.3.4 or 8.1.5 or 8.1.6, though I have used the same setup procedure with Windows 95 and Windows 98 and those Oracle releases without problems.
    Are there any known problems with Oracle 7.3.4, 8.1.5 or 8.1.6 running on client machines with Windows 2000? If so, are there workarounds for this problem?
    null

    Double-check the 8.1.6 release notes, but I don't believe any of those releases are certified on a Win2000 machine. I believe you need 8.1.7.
    Justin

  • I had my pc upgraded from Windows XP to Windows 7 and cannot access my itunes account.  Any suggestions?

    I had my pc upgraded from Windows XP to Windows 7 and cannot access my itunes account.  Any suggestions?

    What does "access my itunes account" mean?
    What have you tried?
    What happened?
    Any info about your issue?

  • Illustrator CS2 Doesn't Start For User on Windows 2000

    I've recently installed Adobe Illustrator CS2 on a Windows 2000 system. When I start the product when logged in as the Administrator, it starts fine. However, when I start the product logged in as a user, it goes thru the startup process, displays all of the various tool windows, and then before it gets to the first time window, it just closes. No error messages, nothing in the Windows system or application log, it just closes the same windows it just opened and then exits.
    I've tried setting the permissions on the folders listed in the Windows Rights KB entry, with no effect. I've tried installing a postscript printer, setting full rights on it, and using it as the default for the user.
    Does anyone know what file right, user priviledge, or other feature might be causing the problem? Thanks.

    I wasn't aware that it required Power User rights. This is somewhat of a high security environment, and that can be difficult.
    Do you, by chance, know what features of Power User rights are needed? I can perhaps grant those to this user, and make it work.
    Do you think it is having a problem accessing portions of the registry, or files in certain folders, or something else?
    Thanks for your help.

  • NI Update Service and non-administrative user

    On my Windows 7 PC I have 2 different users:
    a local Administrator user who can install application but can't navigate to the web (for security reasons)
    an User who can't install anything but can navigate to the web
    I launch NI Update Service under User account and it shows a list of available updates.
    I select one or more of these updates and I click on "Install" button
    Is asks me for the Administrator password, but then it gives a communication error with NI...
    Does it use Administrator user to download the updates?
    It should use it only to install and not to download
    Vix
    In claris non fit interpretatio
    Using LV 2013 SP1 on Win 7 64bit
    Using LV 8.2.1 on WinXP SP3
    Using CVI 2012 SP1 on Win 7 64bit, WinXP and WinXP Embedded
    Using CVI 6.0 on Win2k, WinXP and WinXP Embedded

    Yes, I tried but if I select "Run as administrator" Windows asks me for credential of an administrator account.
    I enter username and password, but my administrator account can't communicate to the web and so I get the error in the attached image (comm_err.jpg).
    As I wrote, I think that the problem is that NI Update Service uses the administrator user not only to install the programs but also to download them from the NI servers.
    I don't think this is OK because as shown in the attached install.jpg the button with the administrator shield is "Install", but after I click on it and enter the administrator credentials, NI Update Service tries to download the selected programs.
    But with my administrator user this is not allowed.
    It should download them with the user that launched it (with this user it is able to find the list of available updates) and use the administrator user only to install.
    Could someone from NI confirm that this is the behavior of NI Update Service, please?
    Vix
    In claris non fit interpretatio
    Using LV 2013 SP1 on Win 7 64bit
    Using LV 8.2.1 on WinXP SP3
    Using CVI 2012 SP1 on Win 7 64bit, WinXP and WinXP Embedded
    Using CVI 6.0 on Win2k, WinXP and WinXP Embedded
    Attachments:
    comm_err.JPG ‏27 KB
    install.JPG ‏63 KB

  • Allowing non-Administrator "Users" to use AEBS (1)

    I'm getting tired of always having to "Authorize" other "Users" on my computer without Administrator Privilege when they wish to connect to my "Closed" AEBS. How can I work around this issue so all "Users" can conect to the AEBS?

    It seems that I have originally stated the happenings incorrectly. It should been titled.
    Allowing non-Administrator (or Standard) "Users" to use the Airport Card freely
    I am both the 'Administrator' and the 'User' in this scenario.
    I log in as the 'User', without "Allow user to Administer this computer" checked in System Preferences. This is for enhanced security while surfing at home and also when using open networks on the road. This way an Authentication by the Administrator is required every time when changes to Mac OS X are about to occur.
    And, as far as I am aware, MY 'User' keychain has all the passwords I need to do what I need to do.
    It's when I am logged in as the 'User' and I go to 'Turn Airport on' (in the Apple Menu) that I get the 'Authenticate' window asking me to "Type an Administrator's name and password to make changes to Mac OS X".
    How do I get around having to 'Authenticate' every time 'User" needs to turn the Airport on?

Maybe you are looking for