Problem with user/admin, XP

So I’ve never run XP as anything BUt admin, and it’s never been a problem. Recently, at work, we went from a normal punch clock to thumbprint software. We’ve never had a problem with buddy punching, but we figured this will help insure we never do. The problem is, that a person get just change the time on the computer, punch in/out then change the time back. So I set up a limited user account and locked down the admin account. This takes care of anyone being able to change the time, but the softare (Acroprint AttendenceRx) won’t run on the limited account, I get a Run Time Error 75 and I can’t figure it out. It still runs fine on the Admin account. So I either need a solution to the run time error or a freeware program to password protect the clock.
Luckily I don’t think anyone will even think to change the time…yet.

Can you modify the short cut to Run As using an Admin account under the limited account.

Huh??
Can you explain that a bit more?

Right click on the shortcut to the program and select “properties”. Under the “Shortcut” tab, click the “Advanced” button. You can check the “Run with different credentials” box to run the program as a different user with different rights

ok - first thing to do is to give users full permissions to the application directory under C:\Program Files

Also, check to see where the program writes data and log files - those locations also need write permissions for users.

then look in the registry (using regedit). Take a look under HKEY_LOCAL_MACHINE\SOFTWARE. See if there is a key for Acroprint or something similar. Give users full access to this key, too.

Test the app as the limited user.

If this does not work, you need to use ProcessMonitor, a tool from Microsoft that will tell you what your application is trying to access and where it is failing - but this is NOT for the fainthearted.

What FordPrefect is suggesting is using the privilege escalation capabilities built in to XP. RUNAS (on the commandline or as an option in a shortcut) lets you change the user that an application executes as. Rightclick on an application shortcut to see the RunAs… option, or choose Properties to set it up permanently.
So


runas /u:fred myapp.exe

will run myapp as fred when I am logged in as james, but I have to type in freds password.
So to use this method, you would have to give everyone the admin account password - not a good idea in your situation.

There are utility programs that will do similar things to RUNAS, and can save the credentials into a secure file, but this should not be necessary. I can give you the one I wrote if you like. However, most applications will run as a limited user given the correct access to files and registry.

Si

Great, that worked, program runs, can’t change the clock and all is good. There will be a select few ‘trusted’ people that will have to know the password in case it crashes and has to be started back up, but other then that, all is well.