2/4/2008 1:47:52 PM

We're about to get a new projection computer ( ) and we want to lock this one down and restrict the administor access to the machine.

I've seen the knowledge base articles about what needs to be done to allow someone other than an administor to run SSP. But I have not seen how that set up changes if we do not have our data in the default location.

1) Are these steps still necessary, or has the SSP install process started taking care of these automatically yet?

2) Is there any difference if the SSP data folders are not in the default location?

Thanks.

2/4/2008 4:27:47 PM

We're about to be in the same boat as you Joel.

From what I believe the %Program Files%/R-Technics/ folder has to be able to be read and write accessed by SSP.

Along with your %SspData%/ folder.

2/4/2008 11:13:20 PM

KB article SI007 what is necessary.


The second statement is correct. The first statement is not correct (not for version 5.3 or later anyway).

2/5/2008 7:22:00 AM

Do we still have to muck about with the registry permissions?

And what about the All Users\Docutments\R-Technics that is still in Documents and Settings, even if the SSP data is over in c:\sspdata?

Thanks.

2/5/2008 12:41:32 PM

The KB article identifies which registry key needs to have permissions set on it. We have almost completed the process of eliminating runtime code that modifies the registry in a way the requires admin rights -- but we're not quite there yet. (Some registry modifications, of course, are expected for certain configuration and installation processes -- but in those cases, the user will need to be logged in as admin anyway).

If you've moved the data files, then you've probably already set the permissions as necessary, but if not, you'll need to do so.

2/5/2008 12:46:43 PM

OK. Thanks.

We'll check it out.

2/5/2008 2:28:39 PM

Thanks for clearing that up for me Doug.

2/5/2008 5:51:33 PM

I am running right now with a limited user account, and a freshly built machine, and all is well. I did adjust the permissions to the All Users\Documents\R-Technics to Full Control. I did NOT adjust the registry yet.

I did have one windows debug alert pop up:

Event Type: Error
Event Source: Application Error
Event Category: None
Event ID: 1000

Description:
Faulting application ssp.exe, version 7.0.0.219, faulting module visualizations ssp.dll, version 1.2.0.1, fault address 0x0004b6b0.

Could this have been because of the registry? It was after I had made several changes to the Program Display Properties, so I don't think it was registry related. I will MOD the registry to be on the safe side.

2/8/2008 3:17:39 PM

Registry seems to be already updated.

OK. I must be a little dense. I wasn't sure how to set permissions on a folder through the gui. So I used CACLS and thought I set it up correctly.

When I do a Cacls to display the permissions on c:\data, the user and administrator both have (OI)(CI)F

But the admin can run SSP and the user cannot.

Am I barking up the wrong tree? Am I doing this the hard way? (Wouldn't be the first time) If so, what is the easier way of doing this?

Thanks.

2/8/2008 8:10:18 PM

From a Windows Explorer windows
Tools
Folder Option
View tab
Scroll to the bottom of the check boxes
Deselect "Use simple file sharing (Recommended)"

You now can set file permissions on the security tab.
Right-click a file
Properties
Security tab

2/9/2008 8:59:55 AM

That's what was going on. We must be setting that by default on the machines at work. I've been very confuzzled with that sharing tab.

Thank you. I should be well on my way.

2/9/2008 9:24:08 AM

OK. I think I got it. I had to go into Advanced settings to get it to "trickle down" to all the subdirectories.

I have to admit that I'm not thrilled about the per User SSP Preferences. Is there any way to share those?

Thanks.

7/6/2008 10:49:11 AM

I'm trying this at home with XP Home and I can't find the "Use simple file shares" to deselect.

So is XP home restricted to simple file sharing only?

Thanks.

7/6/2008 5:31:05 PM

Unfortunately, that is one of the limitations of XP Home.