Local admin rights when Edit locally

Hello, all!
We have the same problem as in
Local Admin rights to "Edit Locally" ?
"The end users do not have administrator rights on their local PCs , they logon to the domain server with restricted rights. When it comes to portal, when trying to edit a document with "Edit locally" it is not possible to do is even if the user has all the rights for the document in the Portal KM configuration. When we make the user local admin, everything is OK"
We are on SPS14, Windows XP SP2. Domain users can run corresponding applications and can create dirs or files in a temp directory. We also utilize env. variable SAPKM_USER_TEMP but with no success.
Could yoã please suggest, how to find rights needed to execute Local Edit. Are there any way to trace this Docservice ActiveX?

Hello Roman,
here a note which describes a solution for a user account wuth restricted rights:
The Edit Locally activex will be installed based on following
installation steps:
The browser will recognize that the KM DocService activex has to be
started.
In case of the activex isn't installed on the the PC, it will be
downloaded from the KM server (...etc/docservice/docservice.cab)
The browser will extract two DLLs from the docservice.cab file
(docservice.dll and sapkmprogressplayer.dll) and register them on the
local PC. To see if the installation succeed you can open within the
browser following dialog: Tools/Internet Options/Settings/View Objects,
look for program file SAP KM DocService Control.
Registry keys in following areas will be created:
Area HKEY_CLASSES_ROOT:
HKCR\AppID\{5F8983A6-347C-46B9-BA7A-1B87E5DAE0BC}
HKCR\ProgressPlayerMod.ProgressPlayer
HKCR\ProgressPlayerMod.ProgressPlayer.1
HKCR\CLSID
HKCR\TypeLib
Area HKEY_LOCAL_MACHINE:
HKLM\Software\Microsoft\Windows\CurrentVersion\ModuleUsage\C:/WINNT/Down
Downloaded Program Files/DocService.dll
HKLM\Software\Microsoft\Code Store Database\Distribution Units\
When finishing these steps successfully the installed version can be
located within the browser dialog Tools/Internet Options/Settings/View
Objects SAP KM DocService Control and den KM DocService will
start loading the document content from the KM server and starting the
corresponding application for editing.
Installation with restricted user accounts:
With restricted user accounts e.g. no access rights to create registry keys in the area of HKCR or HKLM etc., which lets the described installation fail, following installation procedure leads to success:
Register the needed DLLs manually on the PC (e.g. via a shell command script) with a user account having enough access rights.
1.1 Create an installation folder (don't use /windows/system32) on the PC and copy the DLLs (docservice.dll and sapkmprogressplayer.dll) to it (extract them from docservice.cab with a tool e.g. winzip).
1.2 Open a command shell on this installation folder.
1.3 Unregister possible existing versions with the following command:
"regsvr32 docservice.dll /U " and "regsvr32 sapkmprogressplayer.dll /U "
1.4 Register the both DLLs with: "regsvr32 docservice.dll" and "regsvr32 sapkmprogressplayer.dll "
1.5 If the two registration steps fail check the permissions to write
into the system registry.
1.6 The installation folder do not need special permissions, the linkage to the DLLs will be done via the system registry.
1.7 Additionally the following setting is mandatory to succeed the installation:
Disable the "ActiveX Version Check" function within the KM Configuration
SystemAdministration->SystemConfig->KnowledgeManagement->
->Configuration->ContentManagement->Utilities->Editing->LocalEditing-> ActiveX Version Check (Uncheck the checkbox)
Setting a different TEMP directory:
In cases that it is problematic to use the standard %TEMP% directory, setting the environment variable SAPKM_USER_TEMP pinpointing to a corresponding directory path (e.g. X:\SHARES\USERS\xxx\CheckedOutDocuments) will be also supported. If the access to that directory fails the standard %TEMP% directory will be used as fallback.
Hope this helps,
Michael
Message was edited by: Michael Braun

Similar Messages

  • Delay when starting accdb without local Admin rights.

    Hi,
    I have a problem with one application, the front end of the application is MS Access DB that's connects to our SQL Server over odbc driver If the user is in a local administrator group everything is working fast. When the same user is put in the user group
    without Administrative rights I recive a delay for about 60 sec then the error pops up
    After I hit ok a new SQL login pops up and I just press second time ok and the application starts without entering any user and pass. This is not happening if the user is in the built in Administrators Group.
    Thanks for the help
    fract

    Hi fract,
    as a Microsoft partner I have asked support for help.
    Here is their answer:
    Hi Partner,
    Thanks for your reply.
    Based on my research, the issue is identified as a compatibility issue that Access 2010 has with SQL Server 2008 R2. Access uses PERMISSIONS function to check the privileges. The PERMISSIONS function is deprecated in SQL Server 2008 R2. I haven’t found
    any workaround for this issue currently.
    You can check the more detail information at below link:
    PERMISSIONS (Transact-SQL)
    http://msdn.microsoft.com/en-us/library/ms186915(v=sql.105).aspx
    I think you need to access SQL Server 2008R2 with local admin right.
    If you have any further questions, please let me know.
    Best Regards,

  • GroupWise 6.5.7 distribution without local admin rights

    I would like to distribute the GroupWise 6.5.6up1 (6.5.7) client
    installation (from 6.5.1).
    Im using the setup.cfg and setup.ini to have an unattended installation.
    It is working great with local admin rights.
    Now I would like to distribute this version with ZENworks. Im using the
    workstation object (association) so the distribution will take place when
    the workstation starts up.
    But (as far as I can see) the registration of DLLs will not take place.
    What kind of alternatives are there to distribute GroupWise without local
    administrator rights?
    Thanks.
    Armand.

    Thanks for the reply.
    The .aot files give problems, dll files are missing (the known
    vslwp7.dll) and I found a lot of bad experiences on the forums with the
    viewer etc.
    Armand.
    > I've been using the AOTs included with the GW Client (Zen directory). =
    > They import into Zenworks easily and have worked well for me the last 2 =
    > upgrades.
    >
    > >>> <[email protected]> 10/11/2006 1:34:27 AM >>>
    >
    > I would like to distribute the GroupWise 6.5.6up1 (6.5.7) client
    > installation (from 6.5.1).
    > I=92m using the setup.cfg and setup.ini to have an unattended installation.=
    >
    > It is working great with local admin rights.
    >
    > Now I would like to distribute this version with ZENworks. I=92m using the
    > workstation object (association) so the distribution will take place when
    > the workstation starts up.
    > But (as far as I can see) the registration of DLL=92s will not take place.
    >
    > What kind of alternatives are there to distribute GroupWise without local
    > administrator rights?
    >
    > Thanks.
    > Armand.
    >
    >

  • Update says another copy is running and does not update if user does not have local admin rights

    An update message popped up when opening Firefox 9.1 Accepted the message to update. Got above error each time I open Firefox as a user without local admin rights.

    Hi,
    Please see [https://support.mozilla.org/en-US/kb/Updates%20reported%20when%20running%20newest%20version#w_delete-update-configuration-files this.]

  • Installing SQL server with local Admin rights

    Dear DB experts
    I have a concern about installing SQL server 2000 on win 2003 with out local admin rights
    I have delegated local admin rights to a Domain user.  that user can install and configure SQL with out any issues or its is a must to install SQL using local administrator account   pls advise.
    Regards
    Rabbani
    RaSa

    Hi Syed_R,
    SQL Server 2000 was out of support in SQL Server Forums since April,2013. You can install SQL Server 2005 or later version and more experts will assist you.
    As other post, the user that runs the SQL Server installer must have Admin rights on the server when installing. For local installations, you must run Setup as an administrator. If you install SQL Server from a remote share, you must use a domain account
    that has read and execute permissions on the remote share.
    In addition, in preparation for setting up Microsoft SQL Server on this system, you add the Setup account to the local administrators group, also the Setup account need to have certain user rights for avoiding SQL Server installation fails. Such as Local
    Policy Object Display Name, Backup files and directories and so on.
    For more information, you can review the following article.
    http://support.microsoft.com/kb/2000257
    Thanks,
    Sofiya Li
    Sofiya Li
    TechNet Community Support

  • Old/Legacy application requires Local Admin Rights to open Reader

    Hi,
    I've got few users who has a very old application. The app generates certain report in PDF format and then it's supposed to open it up in Adobe Reader. Currently, the users are using Adobe Reader version 6.
    I'm trying to get these users upgraded to latest version of Adobe Reader. After some testing, it seems that this old application works fine if the users are given Local Admin Rights to the computer. The application can successfully generate its reports and then open it up in Adobe Reader.
    The users are running on Windows XP SP3. While testing, I gave users full access to "C:\Program Files\Adobe\" and the legacy application's installation folder, since I'm not sure why the Local Admin Rights allows Reader to open. However, this didn't seem to help.
    Is there anything you can suggest in this case?

    Chris Will wrote:
    >
    http://fpdownload.macromedia.com/get/shockwave/default/english/win95nt/latest/Shockwave_In staller_Full.exe%3E
    >
    > HTTP 404 Not Found.
    What's with the %3E entity on the end of the URL you posted?
    What
    happens if you remove it ;-)
    Here's a tinyurl that hopefully won't wrap (being the reason
    I bracketed
    the original in with <> characters)
    http://tinyurl.com/2f2brm

  • Local Admin Rights - add / remove ?

    Is there a way to add and remove local admin rights for users at logon / logoff in Server 2008?
    Workstations are XP sp3 and Windows 7 Sp1.  We have users who move from computer to computer and they need local admin access but we would prefer to not have Domain Users have local admin rights to all PCs.

    Hi,
    As far as I can see we can add user to local admin group at logon, but the user should relogon to get the membership, and if we also remove the user from local admin at logoff, then this equal to do nothing.
    To add a domain user to a single computer as local administrator using GPO, I would like to suggest you go through the below similar threads:
    Use GPO to add a single admin user to only one computer on the domain.
    http://nerddrivel.wordpress.com/2013/05/24/use-gpo-to-add-a-single-admin-user-to-only-one-computer-on-the-domain/
    How do I add a domain user to a single computer as local administrator using GPO
    http://social.technet.microsoft.com/Forums/en-US/0a3eda5c-28ef-418e-a13d-f47fe0bf1bc3/how-do-i-add-a-domain-user-to-a-single-computer-as-local-administrator-using-gpo
    Granting Local admin rights via Group Policy to a particular computer
    http://social.technet.microsoft.com/Forums/windowsserver/en-US/4ceff330-0b72-4ed2-a55a-3089b504d2fc/granting-local-admin-rights-via-group-policy-to-a-particular-computer?forum=winserverGP
    Hope this helps.
    Regards, Yan Li

  • Running Desktop software without local admin rights

    Is it possible to run Blackberry Desktop Software without the user having local admin rights? I have a number of users who have work BBs who need to use BDS, but I am in the process of correcting my predecessor's decision to give everyone local admin rights.

    Hello gheatley,
    Welcome to the Support Community!
    The BlackBerry® Desktop Software will need to be installed in a Windows® user account with local admin rights, but it can be used from within other user accounts with more limited permissions.
    Thanks.
    -FS
    Come follow your BlackBerry Technical Team on Twitter! @BlackBerryHelp
    Be sure to click Kudos! for those who have helped you.
    Click Solution? for posts that have solved your issue(s)!

  • GPO - 2012 - Enforce Local Admin Right

    Hello,
    Just wondered if there was a way to deploy a GPO to enforce local admin rights for individual endpoints.
    We need a way to control who has local admin rights to what, but in this case we need to say grant local admin rights to Users A, B and C on workstations D, E and F only. 
    Other than creating a GPO 'per workstation' I don't see a way.  DFL / FFL will be 2012.
    Anyone got any ideas?
    Thanks
    Stuart

    Hello
    Thank you for the reply.  This issue is a little hard to grasp and to explain clearly.  I understand what you have said, I am fairly proficient with Group Policy.
    I want to be able to give one single user, access to one single PC and control it centrally.  I think that is a better way of explaining it.  So if I have 100 PCs and 100 users, and say 20 of those users needs to have admin rights on their own
    PC only and not on other PCs. 
    That is what I am trying to accomplish.  If I great a security group called 'Desktop Admins' then link a GPO to an OU where the 100 PCs are, then security filter by the security group, then everytime I add in a user, they will get local admin rights
    to all 100 PCs.  However I only wanted to grant them local admin rights on one PC.  That being their PC.
    I want to manage this centrally rather than remotely assigning local ACLs.  I also like GPO because if a local admin user decides he/she wants to give their mate local admin rights on their PC, GPO will overwrite it.
    Hope that makes sense
    Much Appreciated

  • Giving an OD Network User/Group local admin rights.

    Is there a way to manage workstation admin rights from the server?
    I ran into a problem with Lightroom that requires admin privileges to change the program preferences. We have alot of graphic art students with roaming profiles, spread out across 5 labs, that need to make this change. I would like to be able to add a group or all network users to the local admin group, for a few days, so the students can make the changes.

    This works on 10.5, not sure about 10.6.
    As root on the client.
    Upgrading legacy group for local admin group - this is from 10.4 days, not sure if you still need to do it.
    dseditgroup -o edit -f n -t group -n /Local/Default admin
    Nest OD group in local admin group
    dseditgroup -o edit -a DirectoryAdminGroup -t group -n /Local/Default admin
    Gen

  • CSS containing PHP not displaying when editing locally

    Hello,
    I'm having trouble getting DW to 'see' my CSS styles. This is
    because my 'CSS' file is actually a PHP program that outputs CSS.
    So, in my css.php program, I have at the top:
    <?php
    header("Content-type: text/css");
    ...and then the CSS definitions underneath.
    I reference it with:
    <link href="../css/css.php" rel="stylesheet"
    type="text/css" />
    It works fine on the server, but of course I can't see the
    styles when editing the HTML in DW, because it's seeing the raw php
    file instead of the
    output of that PHP file.
    I've considered installing PHP locally to see if that solves
    the problem, but does anybody here have any other ideas, or has
    anybody already solved this problem?
    Many thanks.
    Kind regards,
    Nick

    I don't know - it might.
    Murray --- ICQ 71997575
    Adobe Community Expert
    (If you *MUST* email me, don't LAUGH when you do so!)
    ==================
    http://www.dreamweavermx-templates.com
    - Template Triage!
    http://www.projectseven.com/go
    - DW FAQs, Tutorials & Resources
    http://www.dwfaq.com - DW FAQs,
    Tutorials & Resources
    http://www.macromedia.com/support/search/
    - Macromedia (MM) Technotes
    ==================
    "crash" <[email protected]> wrote in message
    news:eda2ni$nvf$[email protected]..
    > live view would work, shouldn't it?
    >
    > "Murray *ACE*" <[email protected]>
    wrote in message
    > news:eda29i$ndf$[email protected]..
    >> They would only show up if you served the page, I
    believe.
    >>
    >> --
    >> Murray --- ICQ 71997575
    >> Adobe Community Expert
    >> (If you *MUST* email me, don't LAUGH when you do
    so!)
    >> ==================
    >>
    http://www.dreamweavermx-templates.com
    - Template Triage!
    >>
    http://www.projectseven.com/go
    - DW FAQs, Tutorials & Resources
    >>
    http://www.dwfaq.com - DW FAQs,
    Tutorials & Resources
    >>
    http://www.macromedia.com/support/search/
    - Macromedia (MM) Technotes
    >> ==================
    >>
    >>
    >> "nheaps" <[email protected]> wrote
    in message
    >> news:ed9u9v$ivm$[email protected]..
    >>> Hi Shane,
    >>>
    >>> Would the testing environment enable me to see
    the CSS styles in the
    >>> editing window, or would they only show up on
    the locally-installed web
    >>> server?
    >>>
    >>> Kind regards,
    >>>
    >>> Nick
    >>
    >>
    >
    >

  • Excel files getting corrupted when editing locally

    We are getting corrupted files when using "edit locally". Editing seems to work fine, but when the next user tries to open the file it is corrupted. This error only occurs intermittently. When checking the logs I found below error message:
    #com.sapportals.wcm.repository.service.appproperties.PropertiesManager#irj#com.sapportals.wcm.repository.service.appproperties.PropertiesManager.handleCheckout(431)#System#0#####Client_Thread_13##0#0#Error##Plain###Failed to handle checkout for rid /ithw/it hw documents/Inventory/MU_Inventory.xls: com.sapportals.wcm.repository.service.appproperties.persistence.PersistenceException: [SAP_Portals][Oracle JDBC Driver][Oracle]ORA-00001: unique constraint (SAPWCM.WCM_AP_PROP_PRIMARY) violated
    ORA-06512: at "SAPWCM.WCM_AP_COPY", line 1
    ORA-06512: at line 1
    Does this have anything to do with my problem? What do I do about it?
    We're using KM Docuserver Control 6.1.5.1
    Regards
    Carl Schultze

    TSM:
    Thanks for the reply. I'd be "LOST" without you!
    Anyway, the camera only came with a Windows disk. Per the manufacturer, it doesn't need mac drivers, and the windows drivers are only for the web cam function (which i don't use.)
    The camera is formatted under FAT32 (Windows) format. I couldn't run permissions repair. I did do a repair disk under disk utility. Still having the issues.
    I tried iMovie. I can import the avi file from the camera, and it works!!!!
    So it would appear that there's a bad codec in QT/Perian/VLC?

  • Why would a JNLP require local admin rights?

    I'm working as a technical support contact for a user working on a third-party company's web app, which is a JNLP. (I.e.: this is a JNLP I have no control over and no idea how to use, but the goal is simply to get it to launch.)
    When I am a local admin, I am able to run the JNLP without issue. If I am not a local admin, the application starts to load... the Web Start appears with the application's logo, name, and a few JARs being loaded. Then, nothing. It closes without any errors, and I'm unsure of where I could find any logs with a trace.
    Now, here's the plot twist: the same conditions apply to the Java Console itself. That is, if I am not a local admin, and I try to run the console, Internet Explorer closes. No error, nothing in the event log.
    And, another twist: as I tried this across multiple workstations (Terminal servers, actually, running Server 2003 SP2) I discovered one has a different Java build. The problem occurs across several servers running Java 1.6.0_03. The one that's running 1.5.0_09 does NOT have this problem - the JNLP runs fine, and the console runs fine. IE is the same build (5730.11) on all.
    I'm not even sure where to begin. I don't know where the find relevant log files, I can't run the console, and there is no obvious way to get general support for a Java issue (technically it has nothing to do with this vendor's JNLP if even the console won't run!) except this jumble of forums. Any and all advice is appreciated.

    for troubleshooting failure on particular machines, look at the FAQ:
    http://java.sun.com/javase/6/docs/technotes/guides/javaws/developersguide/faq.html#602
    But it seems like your problems are sooner than would result in any trace file output.
    If the browser cannot show the java console, then it fails to initialize the java plug-in, so I would suggest trying stand alone java applications.
    1.) can you launch from a command line "java -version"
    2.) if you can, can you launch "java java.awt.Frame" it should reply NoSuchMethodError: "main" .
    3.) if that works, try downloading the JDK and run a stand alone demo application from the demos directory such as SeingSet2.
    (cd into C:\Program Files\Java\jdk1.6.0_04\demo\jfc\SwingSet2 , and run "java -jar SwingSet2.jar"
    If you can't do all of that, then java install is messed up, and so you would have no chance of running applets or jnlp applications.
    by the way, what os and hardware are you running on, and what version(s) of java are installed.
    /Andy

  • How to give permission to Internal client local admin rights to install applications

    Dear All,
    I want to give internal client rights to install application in his computer. At the same time I don't want him to login to windows server 2008 with admin rights. Could you please let me know how to do that?

    Unfortunately your post is off topic as it's not specific to Microsoft Training and Certification.  
    This is a standard response I’ve written in advance to help the many people who post their question in this forum in error, but please don’t ignore it.  The links I provide below will help you determine the right forum to ask your question
    in.
    For technical issues with Microsoft products that you would run into as an end user, please visit the Microsoft Answers forum ( http://answers.microsoft.com ) which has sections for Windows, Hotmail,
    Office, IE, and other products.
    For Technical issues with Microsoft products that you might have as an IT professional (like technical installation issues, or other IT issues), please head to the TechNet Discussion forums at http://social.technet.microsoft.com/forums/en-us, and
    search for your product name.
    For issues with products you might have as a Developer (like how to talk to APIs, what version of software do what, or other developer issues), please head to the MSDN discussion forums at http://social.msdn.microsoft.com/forums/en-us, and
    search for your product or issue.
    If you’re asking a question particularly about one of the Microsoft Dynamics products, a great place to start is here: http://community.dynamics.com/ 
    If you think your issue is related to Microsoft Training and Certification and I've flagged it as Off-topic, I apologise.  Please repost your question and include as much detail as possible about your problem so that someone can assist you further. 
    If you really have no idea where to post your question please visit the Where is the forum for…? forum http://social.msdn.microsoft.com/forums/en-us/whatforum/ 
    When you see answers and helpful posts, please click Vote As Helpful,
    Propose As Answer, and/or Mark As Answer
    Jeff Wharton
    MSysDev (C.Sturt), MDbDsgnMgt (C.Sturt), MCT, MCSE: Data Platform & Business Intelligence
    Blog: Mr. Wharty's Ramblings
    Twitter: @Mr_Wharty
    MC ID:
    Microsoft Transcript

  • AD users losing admin rights when working offline.

    We have recently started using AD accounts on our Macs but a critical problem has presented itself.
    Under 'Allow administration by' we are using a domain group called 'Domain Users' and this works fine when users are connected to our corporate network but when they are offline and not able to see the AD servers at login they lose their admin rights.
    So even if you create a mobile account this settings has to be validated every time the user logs on.
    It has been suggested to use the following command to correct the problem but this has no effect:
    "sudo dseditgroup -o edit -a "domain\groupname" -t group admin"
    Has anyone successfully found a workaround for this problem?

    Yep.  That is the side effect of the evolution of AD integration.  Many more things are live look ups.  Have you tried password protected screen savers yet?  Yep, live call to AD.  The reason this is failing is the domain users is an AD group and the system can not resolve the GUID without access to the domain.
    In any case, there is a way around this but it is a little messy and it breaks the whole point of using the plug in to allow for a single point of control.  If you are using cached credentials, you should be able to add the user to the admin group.  Once again, this posses a number of problems as you are now injecting an AD user into a local account, you have no centralized method of removing admin rights from the user, and each machine requires a custom command (you need to issue the users shortname).
    Now, you other option is to say, "it is a security implementation to prevent unauthorized access to the machine when it is not under the protection of out LAN."  Yep, line of garbage, but the real question is, why do they need admin rights?  If for installing software, that likely should not be up to them if you are enforcing a corporate standard.  I generally can't find a good argument for permitting admin rights.

Maybe you are looking for

  • Error when save a file as .wav format

    I was trying to save some sound pressure data into .wav file.  I have a single wavform channel looks like this: Once saved as .wav file, the data becomes: What did I do wrong?

  • Firefox 3.6.13 on Mac 10.6 I lose the "mouseover" capability after running for a while. Only a REBOOT of the MAC will restore.

    After running for a while (hours ? days?) I lose the ability to "mouseover" data on a website and get info. Specifically on Yahoo's portal page, I can't mouse over a news item and get a summary. Restarting Firefox, in safe mode or normal mode, does n

  • Installation sccm client on workgroup client in DMZ

    Hi Guys, i tried to install the sccm client on workgroup clients in a DMZ environment. First I created a client certifikate for the workgroup client on the sccm server and installed the certifikate on the workgroup computer with certutil.exe. command

  • My iPod doesn't show song ratings in iTunes

    When I am listening to music on the street, I give 1 star rating to songs i dislike, so I can delete them from my device when I get home and connect it with iTunes. In iTunes, there are the 5 and 4 tar ratings I gave to specific songs before I even p

  • Problem with shutting down my computer

    Hello, since some days I have a problem with a simple "sudo halt". If my PC is powered off for some hours and I then power it on it does not "halt" properly. If I do a "sudo halt" it first shuts down completely (no standby light is blinking, fans are