System file security

[tonygee]

I have some specific ini files that need to be modified by "user" software settings. The software forces the files into the Windows folder and they cannot be relocated. The users on the workstation only have "user" rights. Can I override the security settings for just the files in question. There may be the need to wildcard the file names.

Thanks,
Tony

 

[bcastner]

Can you wrap the application? See this link for a Microsoft recommended wrapper application (freeware) to handle applications that are not .msi Windows Installer compliant:

http://www.wininstall.com/FREELE2003/

 

[tonygee]

The software is installed from a CD using administrative rights. The issue occurs while trying to save "user selectable" screen preferences. The changes try to write to ini files under the Windows folder.

 

[bcastner]

As you know the folder where the permissions issues occur, the task becomes easier:

http://support.microsoft.com/default.aspx?scid=kb;en-us;308418

 

[tonygee]

The ini files I'm trying to add "modify" security to may not exist at the outset. They are created as new users log into the application. Examples would be user1.ini, user2.ini, user30.ini. I wanted to be able to allow the "modify" attribute to files user*.ini or user?.ini. This would be the ideal way for me - I did not want to compromise the whole Windows folder.

 

[bcastner]

If the application insists on:

. placing the .ini files in a specific folder
. requires read/write/modify rights to the .ini files

This is easily done with an NTFS filestore, and impossible under a FA32 filestore.

. Use convert.exe to change the filestore to NTFS, if necessary
. Use the Security tab on the folder, Advanced, and allow Everyone and Guest access to the folder with full rights. Click the Advanced button, highlight the folder, and click the box at the bottom to pass these rights to child subfolders and files.

. Sometimes you find a stubborn application. What I have had to do (very, very rarely) is copy the first .ini instance created by the application to pre-allocate later instances:

. your application creates user1.ini
. I copy user1.ini as new files user2.ini, user3.ini, user4.ini, ....userX.ini
. Then set specific NTFS permissions at the file level for all of these .ini files. I linked howto from Microsoft earlier.
. Your issue may well be a pathing problem. Right-click My Computer, Properties, Advanced, Environmental Variables, and edit the variable path.
. Download and apply the XP Compatability Toolkit:

http://www.microsoft.com/downloads/...55-b8a4-46cd-a236-3159970fde94&displaylang=en

It is surprising how many aspects of older programs are adjustable with this tool.

Best,
Bill Castner