I can access the location where the VSS database files allocate. I can also manipulate the users.txt file for VSS. How to How to add a user for Visual Source Safe without an admin account, but by directly manipulating the files?
How about simply resetting the VSS admin password?
http://not42.com/2005/06/16/visual-source-safe-admin-password-reset/
http://thetrainerph.spaces.live.com/blog/cns!9F717AF2A2401F0F!2809.entry
My feeling is that it's a gamble when it comes to editing files for VSS. Yes, they're just files, but what side effects could there be by taking this backdoor approach? It's an unknown quantity on what actually happens within the VSS Admin console when adding a new user. Why not just do it the right way?
How about creating a local Windows account on the server named Admin? You should have free reign to add new users to VSS, apparently. That's teh suggestion on this thread at microsoft.public.vstudio.sourcesafe from 2003. Your mileage may vary, depending on version.
If you just want to add new users, create an NT account called Admin and run
SourceSafe Admin as that user - no password prompt will appear! You may
have to add "Use_Network_Name = Yes" to the srcsafe.ini file for this to
work. The only thing you can't do is change the password, because you need to know
the old password to do that.
Related
Apologies if this is a really simple question...
We have a .NET application that is installed by an administrator, and then run by multiple staff on the same computer with their own login credentials (normal user - non-admin).
Application uses MSI installer and is installed to Program Files folder.
The application needs to have some settings about attached devices to the computer saved as preferences so when a user opens the app these settings are set and the user is not asked for preferences each time. These preferences should not be set per user, rather per computer.
However if user A changes one of these settings on the computer, then when user B logs in they should see the changed setting from user A.
Hence the settings need to be per computer, not per user.
Where in windows 7,8,10 etc. can an application save data that is computer specific not user specific, yet allow users without admin rights to change that data?
We have looked at system temp folder but the computers have GPO policy to regularly remove temp folder content.
Any other ideas?
It takes administrator rights to change the permissions on a registry key inside HKLM, but once that's done, anyone in the group given permission can make modifications.
Obviously don't change permissions on any of the standard keys (e.g. HKLM\Software or HKLM\Classes) but in your own application area (HKLM\Software\YouCorp\YouApp\Attached Devices) it's perfectly fine to adjust permissions the way you like.
You'll just have to include "grant write permission on HKLM\Software\YouCorp\YouApp\Attached Devices to the group Users" as one of the actions of your installer.
If you are allergic to the registry, you can do the same with a subdirectory of your application install (e.g. %ProgramFiles%\YouCorp\YouApp\Device Settings)
Given you are using a .Net application, you could store the information in the app.config file associated with the application.
Can someone tell me how (in Windows 7 PRO) I can create a folder, so when I try to open it, User Account Control will ask for a Administrator's password. I need to restrict a folder on the C: drive, only be opened by administrators, and if a normal user tries to open it, he will need the Administrator's password.
You could go to Control Panel, then you go to User Account and Family Safety. Then go to Parental Control and unable it, or get your user off the list. After that, you should be able to do it.
(AT LEAST IT WORKS FOR ME!)
I have a joomla website, which I recently moved and I'm having problems with file permissions. The easy fix would be to change all the folders and files permission to 0777, do whatever I need to do, and then change them back. I don't think that's possible anyway - to change them all at once then make everything as it was.
The other solution would be to switch permissions to user Apache from cpanel. Can I do that? How? What other options do I have?
Thanks!
Well it turns out that you can't change the owner from the cpanel. My solution was to contact my hosting and have me transferred to another server of theirs that used FastCGI, which made all my files' owner Apache (instead of null, or nobody, what it was before).
I couldn't find my answer on the internet, I had to ask them and they gave me that solution.
You can change the file/folder permission using the cpanel.
Just login to your cpanel,
there you can find a option called "File Manager".
Just click on that, it will list all your files and folders in a table at the window.
In the table, at the last column which will be named as "Perms". Just click on the column corresponding to the file/folder for which you want to change the permission.
I know this is old thread, but may useful for next user come here.
There is good tool for doing this by Jacob, here you can visit his page http://boomshadow.net/tech/fixes/fixperms-script/, but may you need root access to do it.
I have an addin program that works with MS Word (version 2007). It is located in the C:\Program Files location. I installed Windows 7 and then went to make a routine change to my files in this location and it would only bring up a read only file. How can I grant myself permission to write to my own program? I cannot change this location or use any other workaround. I have this product out to 25 different companies and I can't change the programming to work from any other location. Thanks
You could also embed a manifest in your EXE that makes your program require adminrights on Windows 7 / Vista.
On Windows Vista, UAC means that users run without admin rights and don't have write access to the program files directories.
The correct solution is to write to a folder for which standard users do have write permissions.
The solution you are looking for is to make your app's folder within program files writeable to all users. You can do this by adding a DACL when installing. It is extremely bad practice to allow standard users to write inside the program files directory and I urge you instead to re-code your app so that it does not need to write there.
Assuming you're doing this as part of modifying the config (and not when your application is running for regular users)...
Your user account probably doesn't have the correct permissions to write/modify the file. Assuming your account is an administrator account, right-click the file, select "Properties". Click the "Security" tab. Click edit and give your user account Full Control.
If you can't do this, it's probably because the ownership of the file doesn't allow you. If this is the case, click on "Advanced", go to the "Owner" tab, and click "Edit".
However, if it needs these permissions when it's running, you should instead be using the %AppData% folder.
I installed my application in Windows 7 and as part of the installation, it installs some text files. Now, if I open the text file in notepad and try to save it, I get an "Access denied" error. I'm logged in as administrator on the machine and the file is not marked read only and security permissions seem to be fine.
However, I could delete or rename the file without any problem and I could create a new file with the same name/location using notepad and the save works fine.
I understand it has something to do with UAC. I'm wondering what UAC does in order to block access to the file. Our application is not installed in Program files folder as I believe UAC restrict any changes to files in Program Files folder
Can anyone throw light on what is going on.
regards
G
With UAC, just because you're logged in as a user with administrator privileges does not mean a program actually runs with them. The program has to either request privilege elevation (which gives the "Do you want to allow this program to _____" UAC pop-up) or explicitly be run as administrator (right-click on the program/shortcut and choose Run as Administrator).
By default most areas of the drive outside of the standard "user files" (a.k.a. My Documents & co.) are restricted to administrator-only access, but the folder permissions can be changed to add access for a particular user if desired.
You will find that saving files almost anywhere except the "my documents" area for the user will be restricted, this includes saving to other drives on the system etc.
If you check the permissions for the directory you are trying to write to, all you have to do is expressely give the user permission. Otherwise only the admins have permission, which requires UAC approval from the user to get the admin token.
You normally get "Access Denied" error when the file is in use. UAC could not be an issue here. Check out if the file is in use by anyother process.
You can use tools like Process Explorer from sysinternals to do that.
You have to right click the file and select properties. THen open the security tab and you can see different accounts with differet privelages. Click USERS and it should highlight. The box under it should have a bunch of check marks that indicate what this user can do. Click Full Control. Apply and Okay. Then you can save!!!