Running Desktop software without local admin rights

Is it possible to run Blackberry Desktop Software without the user having local admin rights? I have a number of users who have work BBs who need to use BDS, but I am in the process of correcting my predecessor's decision to give everyone local admin rights.

Hello gheatley,
Welcome to the Support Community!
The BlackBerry® Desktop Software will need to be installed in a Windows® user account with local admin rights, but it can be used from within other user accounts with more limited permissions.
Thanks.
-FS
Come follow your BlackBerry Technical Team on Twitter! @BlackBerryHelp
Be sure to click Kudos! for those who have helped you.
Click Solution? for posts that have solved your issue(s)!

Similar Messages

Delay when starting accdb without local Admin rights.

Hi,
I have a problem with one application, the front end of the application is MS Access DB that's connects to our SQL Server over odbc driver If the user is in a local administrator group everything is working fast. When the same user is put in the user group
without Administrative rights I recive a delay for about 60 sec then the error pops up
After I hit ok a new SQL login pops up and I just press second time ok and the application starts without entering any user and pass. This is not happening if the user is in the built in Administrators Group.
Thanks for the help
fract

Hi fract,
as a Microsoft partner I have asked support for help.
Here is their answer:
Hi Partner,
Thanks for your reply.
Based on my research, the issue is identified as a compatibility issue that Access 2010 has with SQL Server 2008 R2. Access uses PERMISSIONS function to check the privileges. The PERMISSIONS function is deprecated in SQL Server 2008 R2. I haven’t found
any workaround for this issue currently.
You can check the more detail information at below link:
PERMISSIONS (Transact-SQL)
http://msdn.microsoft.com/en-us/library/ms186915(v=sql.105).aspx
I think you need to access SQL Server 2008R2 with local admin right.
If you have any further questions, please let me know.
Best Regards,

GroupWise 6.5.7 distribution without local admin rights

I would like to distribute the GroupWise 6.5.6up1 (6.5.7) client
installation (from 6.5.1).
Im using the setup.cfg and setup.ini to have an unattended installation.
It is working great with local admin rights.
Now I would like to distribute this version with ZENworks. Im using the
workstation object (association) so the distribution will take place when
the workstation starts up.
But (as far as I can see) the registration of DLLs will not take place.
What kind of alternatives are there to distribute GroupWise without local
administrator rights?
Thanks.
Armand.

Thanks for the reply.
The .aot files give problems, dll files are missing (the known
vslwp7.dll) and I found a lot of bad experiences on the forums with the
viewer etc.
Armand.
> I've been using the AOTs included with the GW Client (Zen directory). =
> They import into Zenworks easily and have worked well for me the last 2 =
> upgrades.
>
> >>> <[email protected]> 10/11/2006 1:34:27 AM >>>
>
> I would like to distribute the GroupWise 6.5.6up1 (6.5.7) client
> installation (from 6.5.1).
> I=92m using the setup.cfg and setup.ini to have an unattended installation.=
>
> It is working great with local admin rights.
>
> Now I would like to distribute this version with ZENworks. I=92m using the
> workstation object (association) so the distribution will take place when
> the workstation starts up.
> But (as far as I can see) the registration of DLL=92s will not take place.
>
> What kind of alternatives are there to distribute GroupWise without local
> administrator rights?
>
> Thanks.
> Armand.
>
>

Update says another copy is running and does not update if user does not have local admin rights

An update message popped up when opening Firefox 9.1 Accepted the message to update. Got above error each time I open Firefox as a user without local admin rights.

Hi,
Please see [https://support.mozilla.org/en-US/kb/Updates%20reported%20when%20running%20newest%20version#w_delete-update-configuration-files this.]

Why my software needs Local Admin? Windows 7 App Compatibility

Hi
I have a software that works great on Windows 7
My problem is that I can run it only with local admin. if I'm logged in with a standard user - I get errors and the software doesn't open. no errors in the event viewer
Usually what I do in those cases is searching the registry or the folder that the user needs a modify permission and add it
Sometimes I use procmon if I can't find it manually.
in this case - procmon didn't help me :/. no "Access Denied" rows at all...
I tried to add the user to the "Power Users"\"Distributed COM Users" group and I still get the same error.
I tried to use the compatibility tab though the software works perfect on windows 7, my only problem is the prerequisite of local admin I'm trying to remove.
Is there any tool I can use to find out what the software does that requires local admin rights?
Tamir Levy

Hi,
Firstly please refer to this article to troubleshoot an application that cannot run as a standard user:
An Application Cannot Run as a Standard User
http://technet.microsoft.com/en-us/library/dd919180(v=ws.10).aspx
Some programs are designed to perform legitimate administrative actions and therefore require administrative permissions. There is no idea to run it without administrator.
Karen Hu
TechNet Community Support

Pushing out software that "requires" admin rights....

I have a piece of software that needs installed on 200 users machines....however the software requires admin rights to install. So, by using group policy, I can successfully push out the software to users that have local admin rights, but it will not install
on machines that do not have local admin rights.
Whats the best way to accomplish this without giving 200 people admin rights?

How did you create a Distribution point ?
To publish or assign a computer program, you must create a distribution point on the publishing server (I am sure, you must have done that already)
However, FYI... Here are the steps
create a distribution point
Log on to the desired server as an administrator.
Create a shared network folder where you will put the Microsoft Windows Installer package (.msi file) that you want to distribute.
Set permissions on the share to allow access to the distribution package.(Authenticated Users should have
READ permissions)
Copy or install the package to the distribution point.
Assign a Package
Computer configuration / Policies / Software Settings / Software installation
Right-click Software installation, point to New, and then click Package.
In the Open dialog box, type the full Universal Naming Convention (UNC) path of the shared installer package that you want. For example,
\\FileServer\Share\software.msi
Important: Do not use the Browse button to access the location.
Make sure that you use the UNC path to the shared installer package.
Click Open.
Click Assigned, and then click OK. The package is listed in the right pane of the Group Policy window.
Close the Group Policy snap-in, click OK, and then quit the Active Directory Users and Computers snap-in or gpmc.
When the client computer starts, the managed software package is automatically installed.
Along with Software Distribution policy, you can set another policy "Always install with elevated privileges"
User Configuration\Administrative Templates\Windows Components\Windows Installer
This policy directs Windows Installer to use system permissions when it installs any program on the system.
This policy extends elevated privileges to all programs. These privileges are usually reserved for programs that have been assigned to the user (offered on the desktop), assigned to the computer (installed automatically), or made available in Add/Remove Programs
in Control Panel. This policy lets users install programs that require access to directories that the user might not have permission to view or change, including directories on highly restricted computers.
If you disable this policy or do not configure it, the system applies the current user's permissions when it installs programs that a system administrator does not distribute or offer.
Caution : Skilled users can take advantage of the permissions this policy grants to change their privileges and gain permanent access to restricted files and folders. Note that the User Configuration version of this policy is not guaranteed
to be secure.
Important: This policy appears both in the Computer Configuration and User Configuration folders. To make this policy effective, you must enable the policy in both folders.
Hope that helps.
If it looks good, Eat it ! Likewise, If you don't know the answers, don't hesitate to ask questions !!
This posting is provided "AS IS" with no warranties or guarantees and confers no rights.
About Me !!!

Local admin rights when Edit locally

Hello, all!
We have the same problem as in
Local Admin rights to "Edit Locally" ?
"The end users do not have administrator rights on their local PCs , they logon to the domain server with restricted rights. When it comes to portal, when trying to edit a document with "Edit locally" it is not possible to do is even if the user has all the rights for the document in the Portal KM configuration. When we make the user local admin, everything is OK"
We are on SPS14, Windows XP SP2. Domain users can run corresponding applications and can create dirs or files in a temp directory. We also utilize env. variable SAPKM_USER_TEMP but with no success.
Could yoã please suggest, how to find rights needed to execute Local Edit. Are there any way to trace this Docservice ActiveX?

Hello Roman,
here a note which describes a solution for a user account wuth restricted rights:
The Edit Locally activex will be installed based on following
installation steps:
The browser will recognize that the KM DocService activex has to be
started.
In case of the activex isn't installed on the the PC, it will be
downloaded from the KM server (...etc/docservice/docservice.cab)
The browser will extract two DLLs from the docservice.cab file
(docservice.dll and sapkmprogressplayer.dll) and register them on the
local PC. To see if the installation succeed you can open within the
browser following dialog: Tools/Internet Options/Settings/View Objects,
look for program file SAP KM DocService Control.
Registry keys in following areas will be created:
Area HKEY_CLASSES_ROOT:
HKCR\AppID\{5F8983A6-347C-46B9-BA7A-1B87E5DAE0BC}
HKCR\ProgressPlayerMod.ProgressPlayer
HKCR\ProgressPlayerMod.ProgressPlayer.1
HKCR\CLSID
HKCR\TypeLib
Area HKEY_LOCAL_MACHINE:
HKLM\Software\Microsoft\Windows\CurrentVersion\ModuleUsage\C:/WINNT/Down
Downloaded Program Files/DocService.dll
HKLM\Software\Microsoft\Code Store Database\Distribution Units\
When finishing these steps successfully the installed version can be
located within the browser dialog Tools/Internet Options/Settings/View
Objects SAP KM DocService Control and den KM DocService will
start loading the document content from the KM server and starting the
corresponding application for editing.
Installation with restricted user accounts:
With restricted user accounts e.g. no access rights to create registry keys in the area of HKCR or HKLM etc., which lets the described installation fail, following installation procedure leads to success:
Register the needed DLLs manually on the PC (e.g. via a shell command script) with a user account having enough access rights.
1.1 Create an installation folder (don't use /windows/system32) on the PC and copy the DLLs (docservice.dll and sapkmprogressplayer.dll) to it (extract them from docservice.cab with a tool e.g. winzip).
1.2 Open a command shell on this installation folder.
1.3 Unregister possible existing versions with the following command:
"regsvr32 docservice.dll /U " and "regsvr32 sapkmprogressplayer.dll /U "
1.4 Register the both DLLs with: "regsvr32 docservice.dll" and "regsvr32 sapkmprogressplayer.dll "
1.5 If the two registration steps fail check the permissions to write
into the system registry.
1.6 The installation folder do not need special permissions, the linkage to the DLLs will be done via the system registry.
1.7 Additionally the following setting is mandatory to succeed the installation:
Disable the "ActiveX Version Check" function within the KM Configuration
SystemAdministration->SystemConfig->KnowledgeManagement->
->Configuration->ContentManagement->Utilities->Editing->LocalEditing-> ActiveX Version Check (Uncheck the checkbox)
Setting a different TEMP directory:
In cases that it is problematic to use the standard %TEMP% directory, setting the environment variable SAPKM_USER_TEMP pinpointing to a corresponding directory path (e.g. X:\SHARES\USERS\xxx\CheckedOutDocuments) will be also supported. If the access to that directory fails the standard %TEMP% directory will be used as fallback.
Hope this helps,
Michael
Message was edited by: Michael Braun

Can individual Adobe Air apps be installed without local admin permission into a user-owned folder?

Is this a supported scenario?
Windows 7 PC.
Adobe Air runtime (latest; 4.0) has been installed by an administrator using a local admin account and the eulaAccepted file is present under the "All Users" profile.
User logs in using her own account which does not have local admin rights.
User downloads an Air app and tries to install it to C:\Users\<username> where she has full write permissions to the disk.
What I observe when acting as the User is that the Windows UAC (security escalation to local admin rights) dialog pops up. Can anyone clearly state what the Adobe Air installer is doing that requires the UAC escalation when installing an app to a user's folder? Thanks.

Thanks for your reply, Chris. We're working around these problems by deploying the Air runtime + the application separately using an administration tool, which is fine for now.
I logged the question because I don't see any registry edits or privileged folder access taking place. I suspect that the UAC escalation has something to do with the "eulaAccepted" file; checking that it exists. I doubt that escalated permissions are really required for this. In the long term, it'd be good if this "use case" could be added to the test cycle of Air; perhaps the UAC dialog could be avoided, improving the flexibility of deployment options.
Ideally the test would start with an adminstrator-installed Air package *without* the EULA being accepted. The user should be able to install apps and approve the EULA without the UAC dialog popping up at all.

Old/Legacy application requires Local Admin Rights to open Reader

Hi,
I've got few users who has a very old application. The app generates certain report in PDF format and then it's supposed to open it up in Adobe Reader. Currently, the users are using Adobe Reader version 6.
I'm trying to get these users upgraded to latest version of Adobe Reader. After some testing, it seems that this old application works fine if the users are given Local Admin Rights to the computer. The application can successfully generate its reports and then open it up in Adobe Reader.
The users are running on Windows XP SP3. While testing, I gave users full access to "C:\Program Files\Adobe\" and the legacy application's installation folder, since I'm not sure why the Local Admin Rights allows Reader to open. However, this didn't seem to help.
Is there anything you can suggest in this case?

Chris Will wrote:
>
http://fpdownload.macromedia.com/get/shockwave/default/english/win95nt/latest/Shockwave_In staller_Full.exe%3E
>
> HTTP 404 Not Found.
What's with the %3E entity on the end of the URL you posted?
What
happens if you remove it ;-)
Here's a tinyurl that hopefully won't wrap (being the reason
I bracketed
the original in with <> characters)
http://tinyurl.com/2f2brm

Installing SQL server with local Admin rights

Dear DB experts
I have a concern about installing SQL server 2000 on win 2003 with out local admin rights
I have delegated local admin rights to a Domain user. that user can install and configure SQL with out any issues or its is a must to install SQL using local administrator account pls advise.
Regards
Rabbani
RaSa

Hi Syed_R,
SQL Server 2000 was out of support in SQL Server Forums since April,2013. You can install SQL Server 2005 or later version and more experts will assist you.
As other post, the user that runs the SQL Server installer must have Admin rights on the server when installing. For local installations, you must run Setup as an administrator. If you install SQL Server from a remote share, you must use a domain account
that has read and execute permissions on the remote share.
In addition, in preparation for setting up Microsoft SQL Server on this system, you add the Setup account to the local administrators group, also the Setup account need to have certain user rights for avoiding SQL Server installation fails. Such as Local
Policy Object Display Name, Backup files and directories and so on.
For more information, you can review the following article.
http://support.microsoft.com/kb/2000257
Thanks,
Sofiya Li
Sofiya Li
TechNet Community Support

GPO - 2012 - Enforce Local Admin Right

Hello,
Just wondered if there was a way to deploy a GPO to enforce local admin rights for individual endpoints.
We need a way to control who has local admin rights to what, but in this case we need to say grant local admin rights to Users A, B and C on workstations D, E and F only.
Other than creating a GPO 'per workstation' I don't see a way. DFL / FFL will be 2012.
Anyone got any ideas?
Thanks
Stuart

Hello
Thank you for the reply. This issue is a little hard to grasp and to explain clearly. I understand what you have said, I am fairly proficient with Group Policy.
I want to be able to give one single user, access to one single PC and control it centrally. I think that is a better way of explaining it. So if I have 100 PCs and 100 users, and say 20 of those users needs to have admin rights on their own
PC only and not on other PCs.
That is what I am trying to accomplish. If I great a security group called 'Desktop Admins' then link a GPO to an OU where the 100 PCs are, then security filter by the security group, then everytime I add in a user, they will get local admin rights
to all 100 PCs. However I only wanted to grant them local admin rights on one PC. That being their PC.
I want to manage this centrally rather than remotely assigning local ACLs. I also like GPO because if a local admin user decides he/she wants to give their mate local admin rights on their PC, GPO will overwrite it.
Hope that makes sense
Much Appreciated

Local Admin Rights - add / remove ?

Is there a way to add and remove local admin rights for users at logon / logoff in Server 2008?
Workstations are XP sp3 and Windows 7 Sp1. We have users who move from computer to computer and they need local admin access but we would prefer to not have Domain Users have local admin rights to all PCs.

Hi,
As far as I can see we can add user to local admin group at logon, but the user should relogon to get the membership, and if we also remove the user from local admin at logoff, then this equal to do nothing.
To add a domain user to a single computer as local administrator using GPO, I would like to suggest you go through the below similar threads:
Use GPO to add a single admin user to only one computer on the domain.
http://nerddrivel.wordpress.com/2013/05/24/use-gpo-to-add-a-single-admin-user-to-only-one-computer-on-the-domain/
How do I add a domain user to a single computer as local administrator using GPO
http://social.technet.microsoft.com/Forums/en-US/0a3eda5c-28ef-418e-a13d-f47fe0bf1bc3/how-do-i-add-a-domain-user-to-a-single-computer-as-local-administrator-using-gpo
Granting Local admin rights via Group Policy to a particular computer
http://social.technet.microsoft.com/Forums/windowsserver/en-US/4ceff330-0b72-4ed2-a55a-3089b504d2fc/granting-local-admin-rights-via-group-policy-to-a-particular-computer?forum=winserverGP
Hope this helps.
Regards, Yan Li

VS2010 Crystal 13 click-once deployment without user admin rights?

The only supported way of deploying our runtimes is to use one of our prepackaged msi's.
We do not have any documentation for manual deployment or anything that lists what specific dlls, registry settings, etc are needed to run specific configurations (ie web app vs windows apps).
Jason

As well as what Jason posted CR MUST have local PC Admin rights because we need to get past DEP/UAC etc. as well as be able to register the COM components, insert all of the registry keys required and the usual folder creation and file copying. Without it CR simply won't install properly and your app will never run. As noted in those other posts if you write a .NET app you have no choice but to use/set the native permissions and file distribution. If it's a WEB based app the you deploy it on each WEB server, users get a Viewer and Printer control through a browser download. But for Windows, it's a must.
IT departments have the ability to push out Special permissions for users to install software, not a CR configuration so check with your IT group or Microsoft and search on Profiles. So the each users doesn't need to be granted Admin rights to use it but they need it to install, assuming when installed it's set for All users. Other option is a local network Admin install on each PC. Not the nice way of doing things though.
Bottom line is because it's a Native .NET windows app you have no choice but to distribute all of CR's runtime and dependencies.
Don

CC for teams with Managed Desktops (ie no user admin rights)

HI,
Just getting started with CC for Teams. I like the concept of assigning users, but finding some lumps in our environment: Windows 7 with managed multiuser desktops. USers have limted rights on their workstations and cannot install software. Also we have users who use more than 1 system or use a system in a confernece room while in collaborative meetings.
So users cannot download from adobe and run installer - no rights. Oh well its really slow anyway....Oh yeah updates - those don't work as well either....
I need to distribute the apps to the workstations and allow users to sign in and out. I can see that I may be able to get it to work with SCCM, but for now to test I logged in as admin, signed into CC, installed an app, then logged out of cc.
Invite UserA to the team.
UserA logs in, starts app, signs into CC - all good so far. But to sign out user gets an error - please start in administrator mode.
WHAT!?? userA needs does NOT need admin priveleges to sign in but DOES need them to sign out???
Is there a resolution for this or some kind of workaround? Otherwise I have to log into the workstation as admin to log the user out? That pretty much defeats the value of the admin console.
BTW - It really would be even nicer it it just use their windows credentials (or have the log in mechanism manage the CC connection) - log in to the desktop and you are good to go - log out and you are signed out of cc as well.
PS - please fix the multiple license acceptance thing - feel like I'm using the nav system in my car - ONCE is enough...

Same problem here, on Mac OS X. Maybe someone at Adobe can elaborate on what they were thinking and how they're going to address this issue...

Stuck on how to improve very slow query without any admin rights

Hello All,
I am using the code below to query a very large data table (RH) and a few other joined tables. I am trying to improve the query but I do not have any admin rights and have no idea how to get diagnostic info on how the query is being executed. Apologies for the system specific and probably not easy to read code but I do not have a generic version that anyone could run, and no admin rights so I can not create tables.
The main part of the code below (subquery R) takes about 10 minutes to run (3 minutes without the date parameters) and the full code (with the two analytic functions on top) below takes an eye watering 30 minutes to run and this is only a subquery of a much larger query so I really need to get this running more quickly. All I want to do is place a cap on the dates, get partitioned row numbers and a lead row value on one of the fields. I really am stuck on how to get this query more efficient. Am I counting things multiple times unnecessarily? How can I make this quicker? Am I committing some cardinal programming sin in using analytic functions on subqueries?
Apologies for the vaugueness of this code and my questions but I am totally clueless about diagnostics and basically have very limited system access so I'm stuck as to where to go or to look.
Very grateful for any advice,
Jon
SELECT R.*
, ROW_NUMBER( ) OVER( PARTITION BY R.RTBLE_ID ORDER BY R.EFF_DT DESC, R.CHG_DT DESC ) RN
, LEAD(R.RTNG_CD,1,0) OVER( PARTITION BY R.RTBLE_ID ORDER BY R.EFF_DT DESC, R.CHG_DT DESC ) RTNG_CD_PREV
FROM ( SELECT RH.RTNG_ID
, RH.RTBLE_ID
, RA.RTNG_ACTN_DESC
, TYP.RTNG_TYP_DESC
, RH.RTNG_CD_ID
, RC.RTNG_CD
, RH.EFF_DT
, RH.CHG_DT
, RAL.RTNG_ALRT_TYP_ID
, RAL.EFF_DT ALRT_EFF_DT
, RAL.CHG_DT ALRT_CHG_DT
, RH.PRV_FLG
FROM FTCH_RTNG.RTNG_HIST RH
, FTCH_RTNG.RTNG_ALRT_HIST RAL
, FII_CORE.RTNG_ACTN RA
, FTCH_RTNG.RTNG_TYP TYP
, FII_CORE.RTNG_CD RC
WHERE RH.RTNG_ACTN_ID = RA.RTNG_ACTN_ID
AND RH.RTNG_TYP_ID = TYP.RTNG_TYP_ID
AND RH.RTNG_TYP_ID = RC.RTNG_TYP_ID
AND RH.RTNG_CD_ID = RC.RTNG_CD_ID
AND RH.RTNG_ID = RAL.RTNG_ID (+)
AND RH.DELETE_FLG = 'N'
AND RH.EFF_DT < TRUNC(CURRENT_DATE,'MM')
AND RAL.EFF_DT < TRUNC(CURRENT_DATE,'MM')
)R
-----

Thanks so much for replying blueforg, and for pointing out the code markup.
Our server is in the US and we run our code from London, so it is the local time I am interested in, CURRENT_DATE is merely there to get that and as you suggest is not a column. I want my cap to the first of whatever month I run the code on so I'm happy with that bit of the code (so 1 Oct if I run it today). I'm just surprised at how slow my code becomes when I try and restrict the dates and get the row numbers and next row values.
This code is actually a subquery used in a much bigger query that I am trying to tidy up and make more efficient. The RN is important as I will eventually be filtering for RN = 1. I didn't post the full query as it is huge,badly written (by me) and and particular to our databases so I'm tackling bits one at a time to cut down on confusion. I'll repost with the RN=1 and the code markup ;)
I also restricting the RH table directly (SELECT * FROM FTCH_RTNG.RTNG_HIST RH WHERE RH.EFF_DT < TRUNC(CURRENT_DATE,'MM')) and moving the analytic functions into the R subquery but that is very slow as well. I heard that temporary tables are efficient? I'm assuming that with my rubbish priveleges I will not be able to do that. I don't want to take any chances of messing anything up either!
Jon
SELECT RT.* FROM
( SELECT R.*
          , ROW_NUMBER( ) OVER( PARTITION BY R.RTBLE_ID ORDER BY R.EFF_DT DESC, R.CHG_DT DESC ) RN
          , LEAD(R.RTNG_CD,1,0) OVER( PARTITION BY R.RTBLE_ID ORDER BY R.EFF_DT DESC, R.CHG_DT DESC ) RTNG_CD_PREV
    FROM ( SELECT RH.RTNG_ID
                  , RH.RTBLE_ID
                  , RA.RTNG_ACTN_DESC
                  , TYP.RTNG_TYP_DESC
                  , RH.RTNG_CD_ID
                  , RC.RTNG_CD
                  , RH.EFF_DT
                  , RH.CHG_DT
                  , RAL.RTNG_ALRT_TYP_ID
                  , RAL.EFF_DT ALRT_EFF_DT
                  , RAL.CHG_DT ALRT_CHG_DT
                  , RH.PRV_FLG
            FROM    FTCH_RTNG.RTNG_HIST RH
                  , FTCH_RTNG.RTNG_ALRT_HIST RAL
                  , FII_CORE.RTNG_ACTN RA
                  , FTCH_RTNG.RTNG_TYP TYP
                  , FII_CORE.RTNG_CD RC
            WHERE RH.RTNG_ACTN_ID = RA.RTNG_ACTN_ID
            AND RH.RTNG_TYP_ID = TYP.RTNG_TYP_ID
            AND RH.RTNG_TYP_ID = RC.RTNG_TYP_ID
            AND RH.RTNG_CD_ID = RC.RTNG_CD_ID
            AND RH.RTNG_ID = RAL.RTNG_ID (+)
            AND RH.DELETE_FLG = 'N'
            AND RH.EFF_DT < TRUNC(CURRENT_DATE,'MM')
            AND RAL.EFF_DT < TRUNC(CURRENT_DATE,'MM')
                                                      )R )RT
WHERE RT.RN = 1-----

Running Desktop software without local admin rights

Similar Messages

Maybe you are looking for