[OPLINTECH] Adobe Reader 7.0
Philip Robinette
robineph@oplin.org
Thu, 7 Apr 2005 11:31:30 -0400
This is a multi-part message in MIME format.
------=_NextPart_000_0124_01C53B65.585CF570
Content-Type: text/plain;
charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
Amy,
Several programs such as Adobe Reader, RealPlayer, and Windows Media =
Player need to write user preference settings in the registry on first =
use. If your security policies prevent writing to the registry, the =
programs will return errors. Moreover if you grant registry access but =
also use mandatory user profiles and/or drive locking hardware or =
software, the registry entries will not be retained the next time the =
user logs on.
You don't identify your operating system or security. If you have =
computers granted by the Gates Foundation, then OPLIN Support can help =
you, and WebJunction maintains the PAComputing site =
http://pacomputing.webjunction.org/do/Home. There is also a "Gateslib" =
user forum in Yahoo! Groups. If you are using the PAComputing Security =
Tool on a nongranted computer, there are forums at =
http://www.webjunction.org/forums/forum.jspa?forumID=3D35 and =
http://securepc.org/forum/cgi-bin/yabb/YaBB.cgi#PACST_cat. If you have =
a Windows Domain, Microsoft provides extensive support on their website =
and user forums.
Whatever your security (assuming Microsoft Windows NT or better), you =
will have to grant public users access to the registry, change mandatory =
profiles to standard profiles, unlock any hardware or software drive =
locking system, and, for good measure, add temporary membership to the =
"Power Users" or "Administrators" group. The tools provided by the =
Gates Foundation or PAComputing automate some, but not all these steps. =
Then log on to each public user profile and run the new software to =
create the preference settings. Finally, log back on as an =
administrator and reapply all your security, remembering especially to =
reset group membership to only "Users" for the public users. For =
mandatory profiles in a Domain, copy the users' ntuser.dat files to the =
roaming profiles and rename them ntuser.man.
Alternatively, you might get away with loading the ntuser files as hives =
in Registry Editor and importing a standard set of preferences for the =
software to each.
Franklin Public Library
------=_NextPart_000_0124_01C53B65.585CF570
Content-Type: text/html;
charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=3DContent-Type content=3D"text/html; =
charset=3Diso-8859-1">
<META content=3D"MSHTML 6.00.2800.1491" name=3DGENERATOR>
<STYLE></STYLE>
</HEAD>
<BODY bgColor=3D#ffffff>
<DIV><FONT size=3D2>Amy,</FONT></DIV>
<DIV><FONT size=3D2></FONT> </DIV>
<DIV><FONT size=3D2>Several programs such as Adobe Reader, RealPlayer, =
and Windows=20
Media Player need to write user preference settings in the registry on =
first=20
use. If your security policies prevent writing to the registry, =
the=20
programs will return errors. Moreover if you grant =
registry=20
access but also use mandatory user profiles and/or drive locking =
hardware or=20
software, the registry entries will not be retained the next time the =
user logs=20
on.</FONT></DIV>
<DIV><FONT size=3D2></FONT> </DIV>
<DIV><FONT size=3D2>You don't identify your operating system or =
security. If=20
you have computers granted by the Gates Foundation, then OPLIN Support =
can help=20
you, and WebJunction maintains the PAComputing site <A=20
href=3D"http://pacomputing.webjunction.org/do/Home">http://pacomputing.we=
bjunction.org/do/Home</A>. =20
There is also a "Gateslib" user forum in Yahoo! Groups. If you are =
using=20
the PAComputing Security Tool on a nongranted computer, there are forums =
at <A=20
href=3D"http://www.webjunction.org/forums/forum.jspa?forumID=3D35">http:/=
/www.webjunction.org/forums/forum.jspa?forumID=3D35</A> and=20
<A=20
href=3D"http://securepc.org/forum/cgi-bin/yabb/YaBB.cgi#PACST_cat">http:/=
/securepc.org/forum/cgi-bin/yabb/YaBB.cgi#PACST_cat</A>. =20
If you have a Windows Domain, Microsoft provides extensive support on =
their=20
website and user forums.</FONT></DIV>
<DIV><FONT size=3D2></FONT> </DIV>
<DIV><FONT size=3D2>Whatever your security (assuming Microsoft Windows =
NT or=20
better), you will have to grant public users access to the =
registry, change=20
mandatory profiles to standard profiles, unlock any hardware or software =
drive=20
locking system, and, for good measure, add temporary membership to the =
"Power=20
Users" or "Administrators" group. The tools provided by the Gates=20
Foundation or PAComputing automate some, but not all these steps. =
Then log=20
on to each public user profile and run the new software to create the =
preference=20
settings. Finally, log back on as an administrator and reapply all =
your=20
security, remembering especially to reset group membership to only =
"Users" for=20
the public users. For mandatory profiles in a Domain, copy =
the users'=20
ntuser.dat files to the roaming profiles and rename them=20
ntuser.man.</FONT></DIV>
<DIV><FONT size=3D2></FONT> </DIV>
<DIV><FONT size=3D2>Alternatively, you might get away with loading the =
ntuser=20
files as hives in Registry Editor and importing a standard set of =
preferences=20
for the software to each.</FONT></DIV>
<DIV><FONT size=3D2></FONT> </DIV>
<DIV><FONT size=3D2>Franklin Public Library</FONT></DIV>
<DIV><FONT size=3D2></FONT> </DIV></BODY></HTML>
------=_NextPart_000_0124_01C53B65.585CF570--