Standard User Analyzer - Microsoft Compatibility Toolkit 5.6 - No (valid) log Error

Information:
Test machine running Windows 7 Professional 64 bit.
Machine is bound to an Active Directory domain
Logged in as a standard user.
I am testing some applications for compatibility in my company on this machine. I am currently trying to utilize the "Standard User Analyzer" tool to determine the shims I need to apply to make these applications work successfully.
Here's what happens:
-I launch Standard User Analyzer
-I "Browse" to "c:\programs\app.exe" (we have the applications housed in this folder instead of Program Files)
-I uncheck the "Elevate" option, and launch the application.
-I complete some operations within the application to allow the Standard User Analyzer to determine the best course of action.
-I exit the application.
-I receive the error:
Standard User Analyzer
Failed to load log file C:\Users\rryan\AppData\Local\Temp\sua :
No (valid) log file is found.
OK
After clicking okay, nothing happens. It does not provide me with any mitigation suggestions.
Once my account is verified, I can post a screenshot of the error.
I would appreciate any assistance you can provide so that I can utilize this application.
Thank you.

Tried that. That did not work, either. This seems to be a common problem with people, which has yet to be resolved.
Plus, using the administrator account is NOT a solution. This is the "Standard User Analyzer." If I am running it as an administrator account, it defeats the purpose of the tool.
The instructions for the tool even state that using it with the administrator option is not best practice.
I'm also not sure why you would direct me to a "test" scenario thinking that would resolve my issue. It doesn't even come close. I used that page months ago when I was learning how to use this. Not an appropriate answer at this
point.
An actual resolution would be greatly appreciated.

Similar Messages

App Run As at standard users.

Hi
I work & manage domain environment.
There is a particular file that I want to give it administrator privileges so that he can make changes to the system.
The file should work for users who do not have local administrator permission.
I prefer to avoid creating batch File because I want to give the permission to the application itself.
I did not find solutions on the net, and what I found is not working.
also the black\white list at the policy management does not change anything.
Thanks

Hi,
Could you please have a share about which file that you would like it to have admin rights here?
There seems to be not possible to achieve such goals in addition to scripts or some 3rd party tools.
Besides, please take a look at the below thread to see if they could help here:
Admin Permissions for standard user for one program
Running a Program as Admin, logged in as a standard
user.
Best regards
Michael Shao
TechNet Community Support

Merging reg files as a standard User without UAC prompt ?

I need to merge reg files as a standard user.
When I run regedit.exe as a standard user, I get an UAC prompt, thanks to the manifest file embedded in the .exe which requires privilieges elevation.
I would like to run regedit.exe as a standard user, without UAC prompt, to merge some .reg files in the HKEY_CURRENT_USER path (standard user has permissions to do so).
How could I do it ?
(I tried a dirty way to do so : I copied regedit.exe from Windows XP to an user folder on my Vista machine, and it works. It runs silently (after setting the compatibility mode to "Windows XP SP2") and merge correctely my reg file.)
Thanks in advance,
Thomas.
More info about manifest files :
http://channel9.msdn.com/Showpost.aspx?postid=209647
http://blogs.msdn.com/uac/
You can easily check this by viewing regedit.exe with notepad for example. Near the end of the exe, you will see this XML part :

<assembly xmlns="urnchemas-microsoft-com:asm.v1" manifestVersion="1.0">
<assemblyIdentity
processorArchitecture="x86"
version="1.0.0.0"
name="Microsoft.Windows.Regedit" type="win32" />
<description>Registry Editor</description>
<dependency>
    <dependentAssembly>
        <assemblyIdentity
            type="win32"
            name="Microsoft.Windows.Common-Controls"
            version="6.0.0.0"
            publicKeyToken="6595b64144ccf1df"
            processorArchitecture="x86"
        />
    </dependentAssembly>
</dependency>
<trustInfo xmlns="urnchemas-microsoft-com:asm.v3">
    <security>
        <requestedPrivileges>
            <requestedExecutionLevel
                level="highestAvailable"
                uiAccess="false"
            />
        </requestedPrivileges>
    </security>
</trustInfo>
</assembly>

And I've had another thought
Edit the registry and change
HKEY_CLASSES_ROOT\regfile\shell\open\command
to
reg import "%1"
Reg will import regfiles.
HKEY_CLASSES_ROOT is a registry key that is composed of merging the
following two keys.
HKEY_CURRENT_USER\Software\Classes
and
HKEY_LOCAL_MACHINE\SOFTWARE\Classes
with entries in HKEY_CURRENT_USER overriding entries in HKEY_LOCAL_MACHINE.
So to specifically edit for the current user only edit HKEY_CURRENT_USER and
for all users (that don't have a user entry) HKEY_LOCAL_MACHINE.
EG
HKEY_CURRENT_USER\Software\Classes\regfile\shell\open\command and
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\regfile\shell\open\command
"DavidMCandy" wrote in message news:4d9feb10-65cb-4b9b-ab3b-627692973523...
> You could edit the application manifest (they are known by the number 24)
> embedded in the application. You use ResHacker
> (http://www.angusj.com/resourcehacker/) to export the manifest, edit it,
> and
> then replace the embedded manifest with the edited one.
>
> But on Vista the manifest seemsto allow execution by nonadmins. It's
> listed
> as
> <requestedExecutionLevel
>
> level="highestAvailable"
>
> uiAccess="false"
>
> />
>
> and according to http://msdn.microsoft.com/en-us/library/bb756929.aspx it
> means
>
> highestAvailable
> The application runs with the highest privileges the current user can
> obtain.
>
> Experiment and see what happens if you change it to AsInvoker.
>
> To edit Regedit you'll need to give yourself permission to change
> c:\windows\regedit.exe
>
> Click Start - All Programs - Accessories - Right click
> Command Prompt and choose Run As Administrator. Type
>
> takeown /f c:\windows\regedit.exe /a
> icacls c:\windows\regedit.exe /grant Administrators:f
>
>
> --
> ..
> --
> "DavidMCandy" wrote in message
> news:58f05c55-c6ac-4762-aad2-011ff129ec24...
>> Convert them to a VBSscript or a batfile (it appears Reg.exe doesn't
>> honour
>> this setting).
>>
>> VBS
>>
>> Dim Sh
>> Set Sh = WScript.CreateObject("WScript.Shell")
>> Sh.RegDelete "HKCU\Software\ACME\"
>> WshShell.RegWrite "HKCU\Software\ACME\FortuneTeller\", 1, "REG_BINARY"
>>
>>
>> Batch
>>
>> Forhelp and examples type
>> reg add /?
>> --
>> ..
>> --
>> "bjohnrini" wrote in message news:cbf09759-a94f-44ee-88de-0bc762fcc5f8...
>>> Is there anyway to run regedit.exe as a standar user?
>>>
>>> I have my group policy set to Ã¢â‚¬Â¢ Automatically deny elevation
>>> requests
>>> for
>>> User Account Control: Behavior of the elevation prompt for standard
>>> users.
>>>
>>> This simply gives me "This program is blocked by group policy"
>>>
>>> On Windows 7.
>>>
>>
>>
>
>

Best practice standard User Acess Test for WIN2012 AD

What is the Best practice standard User Acess Test for WIN2012 AD

Hello,
as before, add a computer to the domain and log on with a domain user account to the computer.
You should be able from the client machine to open the sharedfolders on the DCseither with:
\\DCName\sysvol
\\DCName\netlogonor \\NetBiosDomainName\sysvol
\\NetBiosDomainName\netlogon
Best regards
Meinolf Weber
MVP, MCP, MCTS
Microsoft MVP - Directory Services
My Blog: http://blogs.msmvps.com/MWeber
Disclaimer: This posting is provided AS IS with no warranties or guarantees and confers no rights.
Twitter:

Vista and iTunes shared library - Admin vs. Standard User

Here's a good one.....I am the administrator of the family's Vista desktop computer, my kids are Standard Users. When I log in to the computer and bring up iTunes, I am able to see and access our shared library of music on our Synology DS207+ NAS. When either of my kids log in and bring up iTunes, the DiskStation appears on the left side underneath 'shared' but when they click on it, they are not able to access the music. A dialog box appears with the following message: 'the shared library "Disk Station" is not responding (-39). Check that any firewall software running on either the shared computer or this computer has been set to allow communication on port 3689.'
Their Standard User accounts can access the music on the NAS through mapped drives and windows explorer.
I am running CA (Computer Associates) Security Center and the firewall has the same rules in place for all of our logins. Here is the strange thing, when I change their account type from Standard User to Administrator, they are able to access the shared library of music, no more dialog box with that message. I change their account type back to Standard User and again, they are not able to access the music, and they get that message again.
When I am logged in and enter the 'netstat' command, I see the following entry under foreign address:
NAS:3689 Established
When the kids are logged in, I see the following:
NAS:microsoft-ds Established
I've tried a lot of different things, too numerous to even remember or mention, all with no success. Some troubleshooting measures include:
- change the kids permissions to the music folder on the DiskStation from read only to read/write.
- disabled (not uninstalling) tcpip v6.
- tried every combination of new firewall rule, to include ports 3689, 5353 and every port (and range) in between.
- file and printer sharing is off on the administrator account, and is off on the standard user(s) accounts, but enabling it does not allow access to the library.
- uninstalled Bonjour but once I do that, I cannot see the shared library anymore.
- upgraded Bonjour to the latest version but still no success.
If anybody reading this has other suggestions, please respond.

I actually followed this, but I still had problems that I listed above. Is there any way that when you make changes to one account (even if there is only one main account where changes are made), the changes are automatically (or at least easily) applied to the other user accounts?

Standard users forced default "run as administrator" for acrobat.exe X pro

The software has been reinstalled and patched CS6 all componets of CS6 run fine under a standard user account with the exception of Acrobat Pro. Acrobat Pro runs fine when an administrator is logged in BUT when a standard user logs into the computer all application shortcuts and even direct execution of the exe insists on "running as administrator", seeing as though they are not an administrator they can not run Acrobat Pro X. Any assistance would be grealtly appreciate.

I'm not saying Norton is your problem, but I haven't heard good things about Norton software in a long time, unfortunately.
I always recommend Avast! antivirus to people. The free version is very good in itself, and they offer a more comprehensive Internet Security version as well.
I don't know how technically-oriented you are, but if you do understand how things work fairly well and have taken measures and adopted good practices to avoid running malware, there is the possibility of just shutting off UAC (MIcrosoft User Account Control) if its operation continually gets in the way of your completing your work. Typically, most people just get in the habit of confirming whatever prompts come up anyway, which defeats most of the protection UAC can afford.
-Noel

Windows 7 OS with an Administrator and Standard User Functions

While using this system I have noticed that when some other similar machine with this system seems to want an uneven non match. All mine are updated. I personalized the power scheme and desktop and not sure that the other wants it to be
its subordinate. Does the administrator administrate over other administrators. He or she would set the restore point instead of the standard user. While the both somehow believe their personal documents are at least somewhat private. Sure there is not
equal power on both sides.
Could the other administrator please leave our administrator to do his own non dirty work?

Unfortunately your post is off topic here, in the TechNet Site Feedback forum, because it is not Feedback about the TechNet Website or Subscription. This is a standard response I’ve written up in advance to help many people (thousands, really.)
who post their question in this forum in error, but please don’t ignore it. The links I share below I’ve collected to help you get right where you need to go with your issue.
For technical issues with Microsoft products that you would run into as an
end user of those products, one great source of info and help is
http://answers.microsoft.com, which has sections for Windows, Hotmail, Office, IE, and other products. Office related forums are also here:
http://office.microsoft.com/en-us/support/contact-us-FX103894077.aspx
For Technical issues with Microsoft products that you might have as an
IT professional (like technical installation issues, or other IT issues), you should head to the TechNet Discussion forums at
http://social.technet.microsoft.com/forums/en-us, and search for your product name.
For issues with products you might have as a Developer (like how to talk to APIs, what version of software do what, or other developer issues), you should head to the MSDN discussion forums at
http://social.msdn.microsoft.com/forums/en-us, and search for your product or issue.
If you’re asking a question particularly about one of the Microsoft Dynamics products, a great place to start is here:
http://community.dynamics.com/
If you really think your issue is related to the subscription or the TechNet Website, and I screwed up, I apologize! Please repost your question to the discussion forum and include much more detail about your problem, that could include screenshots
of the issue (do not include subscription information or product keys in your screenshots!), and/or links to the problem you’re seeing.
If you really had no idea where to post this question but you still posted it here, you still shouldn’t have because we have a forum just for you! It’s called the Where is the forum for…? forum and it’s here:
http://social.msdn.microsoft.com/forums/en-us/whatforum/
Moving to off topic.
Thanks, Mike
MSDN and TechNet Subscriptions Support <br/> Read the Subscriptions <a href="http://blogs.msdn.com/msdnsubscriptions">Blog! </a>

Restrict Standard User from not removing the COM-Addins registered under HKLM with Admin rights.

Hello,
I have developed a COM-Addin for word 2013 by VS 2013 and installed it under the HKLM with Admin rights. Now from an non-admin account, ie Standard User I'm able to uncheck that addin from the COM-Addins dialog and remove it also. Previously I have done the
same thing for word 2007 addins and if a non-admin user tries to uncheck it the warning "The
connected state of Office Add-ins registered in HKEY_LOCAL_MACHINE cannot be changed" pops
up. But this is not happening for office 2013 apps(basically word, excel and powerpoint).
This is happening for all Add-Ins installed under HKLM.
How can a Standard User be restricted from unchecking and removing the Office Addins registered under HKEY_LOCAL_MACHINE with same warning "The
connected state of Office Add-ins registered in HKEY_LOCAL_MACHINE cannot be changed" in
a pop-up box?
Regards, Sayan

Hi,
The behavior is changed since Office 2010. Office 2010 and Office 2013 allows a standard user to turn a per-machine add-in off by unchecking the add-in in the COM Add-ins dialog.
To restrict Standard User from not removing the COM Add-ins, we can try to add the add-in to
the Group Policy option: List of managed add-ins in the Office Group Policy template.
Word for example, the policy is under:
User Configuration\Administrative Templates\Microsoft Word 2013\Miscellaneous
To enable this policy setting, provide the following information for each add-in:
In "Value name", specify the programmatic identifier (ProgID) for COM add-ins, or specify the file name of Word add-ins.
To obtain the ProgID for an add-in, use Registry Editor on the client computer where the add-in is installed to locate key names under HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\Word\Addins.
To obtain the file name of an add-in, click the File menu in the application where the add-in is installed. Click Options, click Add-ins, and then use the Location column to determine the file name of the add-in.
In "Value," specify the value as follows:
To specify that an add-in is always enabled, type 1.
Hope this helps.
Regards,
Steve Fan
TechNet Community Support

Windows 7 Elevating using UAC, does not change the standard users setting, it runs the Admins settings

When elevating privilege for a standard user using an admin account, the UAC runs the application under the admins account "user" and not the standard users account "user", the problem is that doing so, it does not change the standard
users settings
In this example, trying to change the "Check for Updates Automatically" as the standard user, is grayed out, you have to be an admin to change this. This is a design of Java.
When you right click and run as an administrator, the option is no longer grayed out and can be deselected, however, this only changes that setting for the admins specific "user", not the standard users specific "user" the admin is elevating
privilege for. as illustrated below.
Is there a work around for an admin to run his credentials but elevate the standard users session instead of his own or some other way to set the standard users setting when admin credentials are required?

Hi,
Based on your description, I understand that you want to disable
Check for Updates Automatically option for standard users in Java.
You can achieve this target by editing
EnableJavaUpdate registry entry. For more details, please refer to following articles and check if can help you.
(Please back up before that registry operation. That will help us to avoid unexpected issues.)
How to disable Java Update in Windows
7
Disable Java updates with
Group Policy
Please Note: Since the web site is not hosted by Microsoft, the link may change without notice. Microsoft
does not guarantee the accuracy of this information.
However, this issue is related to Java product. I suggest that you should contact with Java product support.
I believe we will get a better assistance there.
If anything I misunderstand or any update, please don’t hesitate to let me know.
Hope this helps.
Best regards,
Justin Gu
Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Support, contact [email protected]

Do you standard users and password solman 4.0

dear friends,
system: solman 4.0
database: microsoft SQL server 2005
do you standard users and password solman 4.0.
i m not able to log to system ..
i also tried DDIC and SAP* from 000,800..
do you know any other user of solman .. and it's password..
please give me solution..
thanks
zaheer

Hi,
it is a newly installed system? or you forgotten the sap* passowrd
we can try sap* with the password "PASS".But for that you need to carefully delete it at the database level.
the statment somewhat look like
delete USR02 where UNAME = 'SAP*' and MANDT='000'
, since the table, USR02, which is the one that keeps the passwords.
After this, you will be able to log on as SAP* again with password PASS.
Thanks,
Jansi

Enable and Disabling the Network Adapter with domain user (Standard User)

Hi Guys.
We setup a active directory in our organization. Added client systems(Windows 7 and Windows 8) to the Domain. Domain users are accessing the system with standard users permission. I don't want to give Administrator permissions. But user should able
to Disable and Enable network Adapter without giving the administrator permissions. Please suggest .
Thanks in advance for the help :)

Hi,
According to your description, my understanding is that you want the standard user has the permission to disable/enable network adapter.
I recommend you to implement this function by group policy:
User configuration - Administrative Templates – Network - Network connections
Enable this policy:
Ability to enable/disable a LAN Connection
Besides, you may consider of joining users to Network Configuration Operators Group, detailed information you may reference:
A Description of the Network Configuration Operators Group
http://support.microsoft.com/en-us/kb/297938
Best Regards,
Eve Wang
Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Support, contact [email protected]

Running under a standard user in windows 7

We just bought Photoshop Elements 13 and when the user tries to run the program it run really slow and freezes quite a bit. This user is a standard user in Windows 7 no Administrative rights. If you right-click the icon and choose Run As Administrator it then runs like it is intended to. We don't allow our users to run as Admin so I need a fix for this. The only other thing I am wondering is that the computer is in a Active Directory Domain environment and we push our Group Policies to our systems. One of the policies redirects the users folders to a server share so the My Documents, My Photos, etc. are actually on the server drive not the local drive. Is that part of the problem?
Any insight would be awesome!
Thanks,
-Scott

I agree with Erland.
SQL Service account is used while performing any OS level operation by SQL Server process (sqlservr.exe). On the other hand, the account which is connecting to SQL Server will have it's own permission in Server/Database provided via Logins/Users.
Balmukund Lakhani | Please mark solved if I've answered your question, vote for it as helpful to help other users find a solution quicker
This posting is provided "AS IS" with no warranties, and confers no rights.
My Blog |
Team Blog | @Twitter
Author: SQL Server 2012 AlwaysOn -
Paperback, Kindle

Flash Player does not work with Standard User, but will work when browser is "Run as Administrator"

I don't understand why this is happening, but Flash Player will not work when a Standard User is using the browser. It will only work when the browser is run as an administrator. Any way to fix this? I've tried to uninstall, and reinstall the player, and it still wouldn't work.
The user is on Windows 7, 64-bit. Using IE 10.
Flash not working for Standard User - YouTube

Any update to provide at all here guys? Again, in my situation, it's very much rights-related as a standard user doesn't even report that the flash player exists when testing it on the Adobe Flash Version Detection website (despite it showing up in Control Panel and under Add/Remove Programs). I've already tried giving the C:\Windows\System32\Macromed and files/subfolders appropriate permissions for the standard user and still nothing. If I either give the user in question full local admin rights or logon as the domain admin, then the Adobe Flash Version Detection website says Flash is installed and Flash works fine.
Thoughts???

HELP! Safari will not work with "standard user" via airport card in my mini

Hello, I am successfully connecting with safari via an airport card in my mini mac. I am the administrator of the osX. However no other "user" can connect to the internet via safari. What am I doing wrong? When a standard user clicks on the "internet connect icon" the 2wire224 is an aption but no internet page will connect. Help!!!!!!! ISP has gone as far as they can in helping me.

Hello, I have tried to solve via internet connect - no help. All of a sudden, since I made the post, the 2wire24 selection is now requiring a keychain password to get on. And sometimes my wep password. I know all these but don't want to have to use them and or give them out to my standard users. Any other suggestions or help?

HardwareKey corrupted when I login as standard user on my x10.3.9???

Hi all intelligent guys,
Need your help here....
The problem is: I just created a Standard user with some limite on x10.3.9,then when i launch Preps v4.7 (running in Classic9 environment), it shows me that:" Hardwarekey maybe corrupted......". But when I re-login as Administrator it is O.K. How & Why??
Many thanks & have sweet Valentine's Day!!!
Jane

Try repairing permissions have you tried that?
Go to Applications/Utilites/Disk Utility/ Then Select your HD and repair permissions.
Then repair OS 9 Permissions by going to System Preferences/ click Classic/ then Advanced/ Rebuild Desktop/ Also try starting without extensions.

Standard User Analyzer - Microsoft Compatibility Toolkit 5.6 - No (valid) log Error

Similar Messages

Maybe you are looking for