RE: Network authorities

RE: Network authorities

Scott, if you add the user's domain account to the local administrator group
then they should be able to install. You might be doing a step incorrectly.
If you are using USER MANAGER FOR DOMAINS make sure you change the domain to
the local machine name. I am not sure if Poweruser will allow access to the
registry.

Thanks,

Crawford

RE: Network authorities

Giving people DOMAIN admin access is a very very BAD idea. Users DO NOT
have to be local workstation admins to accept a package. All they need is
access to the JDE registry key and a few shares on the deployment server.
For the exact config download the document FAT Client Management from the
download section of jdelist.com.

Colin




Colin Dawes, MSc
City of Guelph
B7332 SP13.1, Oracle 8.1.6, NT 4.0, Fat & WTS

RE: Network authorities

I agree Colin, it is a bad idea. I suggested that the user's account on the
domain be added to the local administrator's group. Our users have full
admin rights to their NT machine. There are pro's and con's to do it this
way but one good reason is that we have many other applications that require
registry access. It is easier for us to manage than to do tedious security
on the workstation. If the user screws up their workstation we will rebuild
it.

Cheers,

Crawford

RE: Network authorities

Scott,

On all new client installs we make a point of changing the
security/permissions on the software folder in HKEY_LOCAL_MACHINE to
Everyone = Full Control (not forgetting to check the replace permission on
existing subkeys box first). Hope this helps.

Regards,

Graham.
Graham Jones
JDE Systems Manager
[email protected]
0151 653 1700 ext 1109

B7332 SP13.3 / AS400 (CO on AS400) / Fat clients NT4


***** DISCLAIMER ***** This communication contains information which is
confidential. It is for the exclusive use of the intended recipient. If you
are not the intended recipient, please note that any distribution, copying
or use of this communication or the information in it is prohibited. If you
have received this communication in error, please notify us by email or by
telephone on 0151 653 1700 and then delete the email and any copies of it.
*****

RE: Network authorities

What do you do for update packages? Or do they not touch the registry?

Crawford

RE: Network authorities

I put Domain Users in Local Admins. That way no
matter who signs on to an NT workstation they have
local admin rights.




--- cdawes <[email protected]> wrote:
http://198.144.193.139/cgi-bin/wwwthreads/showflat.pl?Cat=0&Board=OW&Number=9608


__________________________________________________