Privilege problem

[amr123]

Hi All,

Consider the scenario on windows XP operating system:

When I install the software as an administrator using the installer, the installer installs the software. This software is used to enumerate the processes and open them on the machine in restricted user with run as admin it works fine.

When the restricted user uses installer to install the software using the user name and password of administrator, the installer run as administrator and installs the software.

When the restricted user uses the installed software to enumerate the processes and open them, the software is unable to enumerate the processes even if it is run as admin.

So, my question is why the software fails to open the processes in case of restricted user even if we are running it as admin?

Please tell me the reason of failure.

Thanks & Regards

[ɹəuəllıʍ ʇɐb]

Welcome to the Windows Forum.

Is that a commercial software, or something that you developed yourself?

If it is a commercial software, then I suggest that you contact the developer's support facility.

[Dencandy]

Hi All,

Consider the scenario on windows XP operating system:

So, my question is why the software fails to open the processes in case of restricted user even if we are running it as admin?

If I've understood your question correctly, there is a misunderstanding here. A Restricted User is a sub-group within Local Users & Local Users even with Run As rights cannot control a computer with the full rights of an Administrator. This is because Admin accounts are used to define the rights of Local Users which cannot be made as equivalent to the full rights of an Administrator. If that was possible then Local Users with Run As rights (including Restricted Users) would be able to alter and run fundamental aspects of the operating system and configuration just as Admin Users can. So even the rights of a Local User with Run As Administrator rights can be restricted by an Administrator or a software designer. For example, a Local User with Run As Administrator rights can be restricted from making changes to the registry and accessing other data. I imagine something like this has been done in the case you refer to.

Software manufacturers usually decide for you which type of users can & cannot run their programs and exactly what their permissions are. Sometimes they allow an Administrator and other users to change this, sometimes not. As Pat Willener says, you'll need to enquire from the developer.

There's a detailed introduction to the various types of account & permissions in chapter 4 of "Microsoft Windows XP Networking & Security" by Ed Bott & Carl Siechert.