If you have apps that run as admin but not as 'standard user' with limited access and are struggling to find what permissions are needed, can I recommend LUABuglight available from http://blogs.msdn.com/aaron_margosis/archive/2006/08/07/LuaBuglight.aspx

Aaron Margosis works for Microsoft Consulting services, and is developing this tool for solving access denied problems. Regmon and filmon are Ok but not the easiest to use.

Basically it works by copying the LUABuglight files to the pc in question and logging in as a non-admin user. Run the LUABuglight.exe and populate the tabs with the local admin account name and password, the password of the currently logged in user, the exe you want to run and a log file location and name. then you click the Start App button which launches the troublesome app and at each point in running that it hits a problem it temporarily uses the admin details to elevate the privilege and allow functionality (just like you were logged in as admin) When finished you launch the reporter which shows a nice clean display of where the issues were. You can then mod the permissions on those folder or reg keys accordingly and 'Aaron's your Uncle'

HIGHLY recommended!!
0 Comments   [ - ] Hide Comments


Please log in to comment

Rating comments in this legacy AppDeploy message board thread won't reorder them,
so that the conversation will remain readable.
Answer this question or Comment on this question for clarity


Aaron Margosis blog used to be a good read but now it seems he has left the XP problem space for that bigger Viistah thing. I'm not going there yet, so lately I haven't been following what he writes.

We also use LUABuglight sometimes and I agree that its a good addition to the toolchest. However, like you point out, if you already regularly use runas and Process Monitor then this does not add much value.

Still its good that you mention it here, I think it could help some to get a quicker understanding, thanks!
Answered 08/21/2007 by: jib
Purple Belt

Please log in to comment
I think this is a nice tool indeed if you're new to packaging and don't have much technical knowledge about windows yet. If both packaging and those the *mon tools are new to you, it's a lot you suddenly have to deal with.

(And unfortunately we have quite a bunch of people that just started and everything is new to them.)

I'm going to recommend this tool to them for sure. Thanks for posting it!
Answered 06/11/2008 by: Rheuvel
Brown Belt

Please log in to comment