During our installation, I set up several users. One of which I severely curtail permissions allowed. This user only sees the START button which only has the Programs section showing. If he clicks it, it shows only our product which has several shortcuts.
It has three proprietary shortcuts, a shortcut to MSPaint, and a shortcut to Log Off (needed since shutdown is not available).
With me so far?
The problem is that the user can open MSPaint and perform any needed operations ( such as cropping pics from our database that he accessed with our files - needed if he wants to show a point of interest). Unfortunately, he can't print it from MSPaint. I get an error "Can not complete the requested operation"). All the other users can use all functions of MSPaint no problem. Also, if I add a shortcut to MS Word the user can print from there no problem (unfortunately not all field systems have Word).
I have gone into the administrator user and tried playing with permissions and adding the user to different groups. Plus removing him from all groups and readding him. The user is currently listed as a power user.
I'm really confused by this because it doesn't seem to be a permissions problem, since the user can print from MS Word. Plus MS Paint doesn't seem to be corrupted since everyone else can use it just fine.
Here's the permissions I remove from Explorer (since it's so tied int Windows):
Code Sample |
RegDBSetDefaultRoot(HKEY_CURRENT_USER); szKey = "Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\Explorer"; RegDBSetKeyValueEx(szKey, "NoClose", REGDB_NUMBER, "1", -1); RegDBSetKeyValueEx(szKey, "NoCommonGroups", REGDB_NUMBER, "1", -1); RegDBSetKeyValueEx(szKey, "NoDesktop", REGDB_NUMBER, "1", -1); RegDBSetKeyValueEx(szKey, "NoFileMenu", REGDB_NUMBER, "1", -1); RegDBSetKeyValueEx(szKey, "NoFind", REGDB_NUMBER, "1", -1); RegDBSetKeyValueEx(szKey, "NoRun", REGDB_NUMBER, "1", -1); RegDBSetKeyValueEx(szKey, "NoSetFolders", REGDB_NUMBER, "1", -1); RegDBSetKeyValueEx(szKey, "NoSetTaskbar", REGDB_NUMBER, "1", -1); // test test //nResult = RegDBSetKeyValueEx(szKey, "NoStartMenuSubFolders", REGDB_NUMBER, "1", -1); RegDBSetKeyValueEx(szKey, "NoTrayContextMenu", REGDB_NUMBER, "1", -1); RegDBSetKeyValueEx(szKey, "NoFavoritesMenu", REGDB_NUMBER, "1", -1); szKey = "Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\System"; RegDBSetKeyValueEx(szKey, "DisableTaskMgr", REGDB_NUMBER, "1", -1); RegDBSetKeyValueEx(szKey, "DisableRegistryTools", REGDB_NUMBER, "1", -1); // Delete Internet Explorer folder from the programs menu ProgDefGroupType(PERSONAL); end; |
Anyone have ideas, suggestions, catcalls from the audience?