TDM vi's work in Admin account, but not Limited user

[minnellac]

I thought of another way to go, but this gets into details about Windows that I am just not familiar with. Can I set my app up to run from a different account automatically. I see how the runas command could be used, but I'd rather make the whole process seemless (and not require the user to know a password). Googling around a little, I ran across some stuff that looks like it does this in .NET. Anyone know if this is possible?

Chris

[rsw]

Hi Chris,

The run-as option under XP is a way to go, although it does add another security issue to a system that may be bes to try and avoid if possable. I did install the program yesterday under 1 of our Lab PC's and was able to run it and read from the TDMS file (with the file in the same folder as the .exe) - this worked for both source and executable, and worked under superuser and a user with "Restricted Access" - Would it be possible for you to get the exact user permissions from your customer regarding there restricted access account setup?

I shall run the program again today under the Guest account (as I know it to be more locked down than Restricted Access users).

Thanks,

[F._Schubert]

One option is to encapsulate the VIs that require the privileges in a windows service. Thats a nice way to go with hardware access, I don't know if it fits your specs as it might pose a secuirity risk (the VIs placed in the service have almost every privileg...).

Felix

[minnellac]

Thanks for the suggestion. This company is fairly security conscious, so I don't know how they'd feel about that. Plus I'd rather not have the programming overhead of sending all file IO operations through a service. For now, I will be demanding a certain access level for users of the program. We'll see how it works out with that. The whole file management system should be replaced with a db backend, but that won't fit under the current contract.

Chris

[rsw]

Hi Chris,

I've been unable to reproduce this issue under restricted access, it works just the same as under admin users. Does the company have any additional restrictions on users that may be causing this problem?

Thanks,

[minnellac]

Huh. I don't know what to say. The customer hasn't tried on one of their computers yet (because IT is inconvenient). I've been running on a clean XP virtual machine for testing, and I was experiencing problems with the guest account. I'll create a new one from scratch as a member of the Users group and see how it goes.

Thanks for your assistance.
Chris

[ken_m]

Hi Rob and Chris,

I have been following your discussion with great interest. I have a very similar problem (I think). I have a program that we are using to test some electronic systems that are used in military equipment. It is necessary for the operator to have a security clearance as the components and test results are classified, so computer security is very important on this system.

Our program was written in Labview 6.1 and runs on a PC with Windows 2000 ver. 5.0 Bld 2195 SP 3. Even though this is a stand alone test station and cannot ever be connected to the internet, we have McAfee virus protection ver. 8.01 installed and running. Test data is written to an Excel spreadsheet. The spreadsheet is then stored and printed on a dedicated printer.

When the operator is logged on as a "user" he can run the program but he cannot print or store his test results. Also, I have noticed that all the print vi's on the function palatte are missing. Even the Excel and Word ones

When I log on as a system admin. I can run the program, print and store the test results. Also, all the print vi's on the function palatte are present and functional. Including the Excel and Word vi's.

For security reasons, no test operator can be a system admin.

So, how can I have my test operator be a user and not  a sys admin, run the test program, print and store the results.

Please note, upgrading the system would take an act of God (i.e. permission from the military and the customer and DSS.), so that is not an option.

Is this the same problem or something completely different?

I will try the "power user" suggestion you mentioned in an earlier message.

Thanks for your help.

Ken M
Sr. Test Engineer
CPI Inc.

[minnellac]

It sounds like you may have a different problem. You may have more luck opening a new thread with the question, but one thing I would suggest is creating an executable out of your program and running from that instead of the development environment. Also, your problem may have something to do with access to Microsoft Office products for your "user". The Report Generation toolkit relies on a lot of activex calls to office components.

Chris

[ken_m]

Hi Chris,

Thanks for the advice. I will post this as a new thread.

Ken M
🙂

[Karunya_R]

I agree with C.Minella in that the problem starts with the icons Excel and Word icons being missing on the functions palette. Does program still run without a broken arrow? And like C.Minella said, what about the executable? Have you tried creating a different user to see if you are still having the same problem?