# Problem with user/admin, XP

**URL:** <https://boards.straightdope.com/t/problem-with-user-admin-xp/397541>\
**Category:** Factual Questions\
**Created:** [March 26, 2007, 1:57pm UTC](https://boards.straightdope.com/t/problem-with-user-admin-xp/397541 "2007-03-26T13:57:48Z")\
**Posts on this page:** 6\
**Page:** 1

<div class="post-metadata">

**Author:** ![Joey\_P](https://avatars.discourse-cdn.com/v4/letter/j/919ad9/32.png) [@Joey\_P](https://boards.straightdope.com/u/Joey_P)\
**Post date:** [March 26, 2007, 1:57pm UTC](https://boards.straightdope.com/t/problem-with-user-admin-xp/397541/1 "2007-03-26T13:57:48Z")

</div>

So I’ve never run XP as anything BUt admin, and it’s never been a problem. Recently, at work, we went from a normal punch clock to thumbprint software. We’ve never had a problem with buddy punching, but we figured this will help insure we never do. The problem is, that a person get just change the time on the computer, punch in/out then change the time back. So I set up a limited user account and locked down the admin account. This takes care of anyone being able to change the time, but the softare (Acroprint AttendenceRx) won’t run on the limited account, I get a Run Time Error 75 and I can’t figure it out. It still runs fine on the Admin account. So I either need a solution to the run time error or a freeware program to password protect the clock.  
Luckily I don’t think anyone will even think to change the time…yet.

---

<div class="post-metadata">

**Author:** ![FordPrefect](https://avatars.discourse-cdn.com/v4/letter/f/e99b99/32.png) [@FordPrefect](https://boards.straightdope.com/u/FordPrefect)\
**Post date:** [March 26, 2007, 2:02pm UTC](https://boards.straightdope.com/t/problem-with-user-admin-xp/397541/2 "2007-03-26T14:02:48Z")

</div>

Can you modify the short cut to Run As using an Admin account under the limited account.

---

<div class="post-metadata">

**Author:** ![Joey\_P](https://avatars.discourse-cdn.com/v4/letter/j/919ad9/32.png) [@Joey\_P](https://boards.straightdope.com/u/Joey_P)\
**Post date:** [March 26, 2007, 3:01pm UTC](https://boards.straightdope.com/t/problem-with-user-admin-xp/397541/3 "2007-03-26T15:01:33Z")

</div>

[QUOTE=FordPrefect]  
Can you modify the short cut to Run As using an Admin account under the limited account.  
[/QUOTE]

Huh??  
Can you explain that a bit more?

---

<div class="post-metadata">

**Author:** ![Smitty](https://avatars.discourse-cdn.com/v4/letter/s/e274bd/32.png) [@Smitty](https://boards.straightdope.com/u/Smitty)\
**Post date:** [March 26, 2007, 3:08pm UTC](https://boards.straightdope.com/t/problem-with-user-admin-xp/397541/4 "2007-03-26T15:08:31Z")

</div>

[QUOTE=Joey P]  
Huh??  
Can you explain that a bit more?  
[/QUOTE]

Right click on the shortcut to the program and select “properties”. Under the “Shortcut” tab, click the “Advanced” button. You can check the “Run with different credentials” box to run the program as a different user with different rights

---

<div class="post-metadata">

**Author:** ![si\_blakely](https://avatars.discourse-cdn.com/v4/letter/s/d9b06d/32.png) [@si\_blakely](https://boards.straightdope.com/u/si_blakely)\
**Post date:** [March 26, 2007, 3:23pm UTC](https://boards.straightdope.com/t/problem-with-user-admin-xp/397541/5 "2007-03-26T15:23:37Z")

</div>

ok - first thing to do is to give users full permissions to the application directory under _C:\Program Files_

Also, check to see where the program writes data and log files - those locations also need write permissions for users.

then look in the registry (using regedit). Take a look under _HKEY\_LOCAL\_MACHINE\SOFTWARE_. See if there is a key for _Acroprint_ or something similar. Give users full access to this key, too.

Test the app as the limited user.

If this does not work, you need to use **ProcessMonitor** , a tool from Microsoft that will tell you what your application is trying to access and where it is failing - but this is NOT for the fainthearted.

What _FordPrefect_ is suggesting is using the privilege escalation capabilities built in to XP. RUNAS (on the commandline or as an option in a shortcut) lets you change the user that an application executes as. Rightclick on an application shortcut to see the **RunAs…** option, or choose Properties to set it up permanently.  
So

```auto

runas /u:fred myapp.exe

```

will run myapp as **fred** when I am logged in as **james** , but I have to type in **fred** s password.  
So to use this method, you would have to give everyone the admin account password - not a good idea in your situation.

There are utility programs that will do similar things to RUNAS, and can save the credentials into a secure file, but this should not be necessary. I can give you the one I wrote if you like. However, most applications will run as a limited user given the correct access to files and registry.

Si

---

<div class="post-metadata">

**Author:** ![Joey\_P](https://avatars.discourse-cdn.com/v4/letter/j/919ad9/32.png) [@Joey\_P](https://boards.straightdope.com/u/Joey_P)\
**Post date:** [March 26, 2007, 3:31pm UTC](https://boards.straightdope.com/t/problem-with-user-admin-xp/397541/6 "2007-03-26T15:31:08Z")

</div>

[QUOTE=Smitty]  
Right click on the shortcut to the program and select “properties”. Under the “Shortcut” tab, click the “Advanced” button. You can check the “Run with different credentials” box to run the program as a different user with different rights  
[/QUOTE]

Great, that worked, program runs, can’t change the clock and all is good. There will be a select few ‘trusted’ people that will have to know the password in case it crashes and has to be started back up, but other then that, all is well.
