Attachmate Extra 6.4 & Windows 2000 Prof. OS 1

[lantech]

I am installing Attachmate Extra 6.4 on Windows 2000 Prof. OS. Can it be done successfully? I am getting a 'security file not found, contact admin.' If I login as Admin it runs, if i login as user it doesn't... Please Help!

 

[SATech]

I'm having the exact same problem with an Attachmate product called InfoConnect. According to their support "specialists", this program will ONLY run on W2K if the user is assigned, at a minimum, Power User rights. I currently have a trouble ticket opened with them to give me detailed information as to why this is. As a system administrator, it is unacceptable to compromise computer security because of this! I have explored all of the file locations and registry entries that this program makes and loosened up the security in those specific areas but to no avail - the 'Security file not found' continues to haunt me.

I will post back if I get a workable solution. I've toyed with different security templates and duplicated power user permissions on the file structure but no luck. It's very frustrating! In the meantime, if anyone can shed some light on this issue it would be most appreciated! ________
S. Joseph Vergara
SVergara@Texas.net

 

[Guest_imported]

Dear collegues, I'm glad I'm not alone. I've got the same problem and contacted Attachmate. They still didn't find a solution for me. If I download trial software from other brands it works without any problem. I've messed up my Win2000 servers surching for the security problem. Untill now no succes. If anybody finds out how it can be solved I would extremely appreciate the help.

 

[SATech]

OK...since I last posted, I've managed to find a fix (no thanks to Attachmate). I wish I could tell you EXACTLY what that fix was!!! What I can say is that in mmc, I built my own security template using the basicws.inf as a starting point. I made so many minor tweaks that, because of time constraints, I wasn't able to test EACH change as I made it. All I can tell you is that it works now!

I can send you a copy of the file if you'd like...just make sure you test it before implementing.
________
S. Joseph Vergara
SVergara@Texas.net

 

[Guest_imported]

Hi,
I’m so glad someone else is having a similar problem.

We’re running v6.5 worldwide of Extra!.

Actually IRMA for the mainframe 4.1 16bit that’s included with it when you click on the 16bit install option.

Of course 16bit won’t load in win2k, so I’m trying the 6.5 sp2 option which is supposed to be compatible with win2k.

We’re on coax cables using the IRMA cards.

It seems to load, then says ‘connected’ and….. nothing.

Nothing comes down from the host to the screen. I’ve tried every setting with no luck.

Until I get this figured out we can’t migrate from win98se to win2k…L

I’d appreciate any insight you could offer.
Thank you,
dmarcotte@konnect.net

 

[Guest_imported]

I have the exact same problems with our clients who are using Attachmate 6.4 on new Windows 2000 machines. The only way that I've been able to get it to work is to add each domain user to the local administrators group. This is a fix but it is not acceptable because it is against company policy for end users to be members of local admin group. Oh well I'll keep searching good luck to you all.

 

[defox6]

We've just built a development environment with Windows 2000 and had the same problem with Attachmate 6.5 - only workaround we've found so far is the following (not sure if this applies to 6.4 as well)

As administrator, run regedt32
Open up HKEY_CLASSES_ROOT - make sure users are all in a valid group and add this group to HKEY_CLASSES_ROOT by using Security \ Permissons - go into Advanced settings and allow them to Create Subkey - we did not need to give them full control.

Standard users will no longer get the message - however, I'm not sure how much access we've now given within Windows 2000 by allowing this permission! I'm trying to work down the list of everything in HKEY_CLASSES_ROOT to narrow the key(s) down but it's going to take a long time.

One good thing though, the users are still unable to install any of their own software, so it definitely hasn't given them Power User or Administrator rights in this aspect.

 

[Guest_imported]

I am having problems with Extra 6.5 and 7.0. When i create the Sessions i get and Extra.exe error. Has anyone seen this? i am running Win2k pro clients on a peer to peer network. If anyone has seen this and has been able to correct it please let me know.

Attachmate is being no help and neither is my processing center. Thanks so Much

 

[rolandgohl]

Hi All,

I had the same problem with Attachmate Extra 6.4 and Windows 2000. I've done a MSI package of this Application and run into same Problems. I had no problems if i logged on as an administrator, but with a "normal user" i got the same errors. Then i scanned the startup of the executable file (Extra.exe) with regmon and filemon and got the result:

Registry:
There are many Registry-entries with "Access Denied" like the sample below.

149,5.14162359,EXTRA.exe:1028,CreateKey,HKCR\CLSID\{9A6DB547-9106-101B-A54B-0000C06E6B8A}\InProcServer32 ACCDENIED

NTFS:
C:\Program Files\E!OC\Sessions ACCDENIED

So I added the "Set Value" and "Create Subkey" permission in the Registry for the User "Users" on all the Subkeys with ACCDenied. I also changed the NTFS-Permssion for the "Users"-Account on "C:\Program Files\E!OC\Sessions" to modify.

After these changes Extra Office client worked well.

Regards
Roland

 

[DBG]

Hello,
I had the Problem with 6.4 on WinXP Pro. You can try my solution for this Problem.
It is tested only for WinXP Pro but I see no reason why it shouldn't also work for W2k.

Most of you will know what it means to change the Registry, but for those who don't

BE WARNED, CHANGING THE REGISTRY CAN HARM YOUR SYSTEM IN A FATAL WAY!

So don't try this if you don't know what you are going to do. And don't blame me if you have to reinstall your System (I had to do it three times until it worked).

You only need to change the Rights for the Group USERS don't change the Rights of other Groups (ADMINISTRATORS,POWERUSERS,...)
If the Group USERS is not listed for a Key, you have to add it.
For proper results it is necessary to give full Rights to the USERS Group. I know this can probabely create a Securityhole but well, most of the Keys are Attachemate specific so I think it is not to big.

OK, so let's begin

HKLM\Software ===> !!!! Warning !!!! This Key is a special case. Change only the Rights on this Level of that Key, do not change the Rights for the SubKeys, this can cause a lot of trouble.

For the rest of the Keys you have to change the Rights of the Subkeys too.

HKLM\Software\Microsoft\COM3
HKLM\SOFTWARE\Microsoft\CTF\SystemShared

HKLM\Software\Microsoft\Windows\CurrentVersion\Setup

HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers
HKLM\software\Microsoft\Windows\CurrentVersion\Explorer\Advanced
HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders

HKLM\Software\Microsoft\Windows NT\CurrentVersion\LanguagePack
HKLM\Software\Microsoft\Windows NT\CurrentVersion\FontSubstitutes

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\Extra.exe
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\Nodecfg.exe

HKLM\System\CurrentControlSet\Control\MediaProperties\PrivateProperties\Joystick\Winmm

HKLM\SOFTWARE\Attachmate
HKLM\SOFTWARE\Classes\CLSID\{8E20E021-AAA5-11d1-BA6C-000629116EB9}
HKLM\SOFTWARE\Classes\CLSID\{8E20E022-AAA5-11d1-BA6C-000629116EB9}

HKCR\.edp ---> you only need to change this if a normal user can create new Session Documents

HKCR\CLSID\{2E91AFF1-8EBC-11CE-A16C-10005A6155A7}
HKCR\CLSID\{2E91AFF2-8EBC-11CE-A16C-10005A6155A7}
HKCR\CLSID\{6E19A5F2-6C15-11CE-9FE7-08005A9B563E}
HKCR\CLSID\{7FAE9460-C040-11CD-B010-0000C06E6B8A}
HKCR\CLSID\{8E20E021-AAA5-11d1-BA6C-000629116EB9}
HKCR\CLSID\{8E20E022-AAA5-11d1-BA6C-000629116EB9}
HKCR\CLSID\{9A6DB546-9106-101B-A54B-0000C06E6B8A}
HKCR\CLSID\{9A6DB547-9106-101B-A54B-0000C06E6B8A}

HKCR\EXTRA.Sessions
HKCR\EXTRA!.Session.1
HKCR\EXTRA!BasicHeader
HKCR\EXTRA!BasicMacro
HKCR\EXTRA!DialogEditor
HKCR\EXTRA.System

HKCR\SM Automation

HKCR\Interface\{9A6DB546-9106-101B-A54B-0000C06E6B8A}
HKCR\Interface\{2E91AFF5-8EBC-11CE-A16C-10005A6155A7}

HKCR\TypeLib\{7fae9440-c040-11cd-b010-0000c06e6b8a}
HKCR\TypeLib\{8E20E020-AAA5-11d1-BA6C-000629116EB9}

HKCU\Software\Attachmate

---------------------------------------------------------------------------------------------------
At last you have to change the Rights of some Files and Folders. Giving "Change" Rights is enough for that.

C:\Programme\E!PC -> complete Folder and Subfolders
C:\WINDOWS\aomaudit.slg
C:\WINDOWS\SYSTEM32\shell32.dll

That's it ;-)


Thanks to the guys from

http://www.sysinternals.com

for their Freeware Tools Regmon and Filmon.
These Tools are Gold.

Have fun, live is short enough.
Dietmar

 

[smith123]

give rights for your winnt folder or the program folder where u have install for that user

 

[parenzan]

I am also having a similiar problem with Windows 2000 and attachmate 6.5 When launching a session as a regular user I receive the following message " failed to update the system registry. Please try using regedit". If I log in as Adminstrator I do not get this error. I know it is a security issue because if I add the user to the Power users group it works fine but this is not a long term solution for me. Has anyone see this error and if so do you know the registry key that I could change?

Thanks