Software Deployment

Well not entirely..

Essentially we're deploying Visual Studio 6 + SP5 (SP6 has uninstall issues for some reason but our client is happy with SP5) on a silent install and all works well under WinXP.

Now.. Under Win2003 Server it installs and runs fine for Administrator. Under the User.. well.. gawd.. almost all the 30+ apps had user permissions issues.

Fine..

Ironed them out EXCEPT for four..

These four either:

a) Write random keys to the HKCR\CLSID section which only admins can access
b) Write to 200+ reg keys in HKCR\CLSID\Rose*.* so I need to give admin access to all 200 there. Ughhh!
c) Require multiple file/folder/registry permissions for multiple addon components (in this case, Visual Basic 6).

Of course I cannot give Admin rights to Users in HKCR\CLSID as thats an utterly massive security breach especially when Visual Studio 6 will be used by users on the Win2003 server..

What I need to know is:

1) Other than simple Regmon and Filemon, is there a full-blown File/Folder/Registry Permission Checker that can scan the EXE of an app running to see what File/Folder/Registry entries are being OPEN\QUERY\WRITTEN to? This is a HOLY GRAIL app and would solve huge headaches especially for down the road.

I know that on the IIS Resource Kit CD there is this:

Permission Checker

The Permission Checker component can be used to check the access rights (for the current user) to a given file. You can use Permission Checker to exclude the items that are not accessible to the current user from the generated HTML page.

2) An easier way to solve a, b , c above other than going to Microsoft and asking them directly how to bypass these permission problems so a User without admin rights can access these remaining 4 Visual Studio 6 apps under Win2003 server?

Thanks all!

e. [8|]