User permission setting problem on Win10


  1. EOF
    Posts : 85
    Win7 Ultimate
       #1

    User permission setting problem on Win10


    Hi!
    I need some help about set permission rules for a user account on win10 in my network.

    Here are my questions:
    Is there any possibility to read out, or to show , export for later import any user credentials or access in win10?

    Our windows are deployed with MS AutoPilot and I have to install an old version of FireFox, the v3.0 but many times
    there is a problem to run the setup eve if I run it as admin.
    If FireFox installed and I run it, I get some error like "FireFox can not access to some path..." but not mentioned to which path.
    But there is a short description does they is maybe a problem to accessing the profile folder or the user has no access to it.
    This is not true.
    I tested several times to copy, rename, delete files in the FF profile folder, everything was done without error.
    I cant figure out which folders are restricted to access to my user account....

    If I install the FF under my admin account everything is ok.

    How can I find out lets say what permissions are enabled, disabled or access restrictions path are set for my user account which is a regular user account, not an admin account?

    Is it possible to restrict a user not to start an out-dated app or old app in windows 10 ?

    Any advice would be nice.

    Thank you.
      My Computer


  2. Posts : 1,746
    Windows 10 Pro x64 22H2
       #2

    Does your account have "Ransomware protection" enabled? (in Windows defender)

    Is it possible to restrict a user not to start an out-dated app or old app in windows 10 ?
    Yes, what you're looking for is built into Windows, it's called "AppLocker"

    Is there any possibility to read out, or to show , export for later import any user credentials or access in win10?
    Yes, but you may be overwhelmed by the amount of information, it's called "Security log" in event viewer.
    Additional auditing can be enabled in secpol.msc, but it depends on specific type of auditing you may need.

    From your description It's not clear what the problem may be, a bit of detective work is needed to first discover what's the problem before trying to find a solution.

    sysinternals tools can surely help, ex. process monitor.
      My Computer


  3. EOF
    Posts : 85
    Win7 Ultimate
    Thread Starter
       #3

    Thank you very much for you quick replay.

    I will try to describe as short I can what is going:

    We have around 90 PC's.
    We are migrating everything to Microsoft Intune.
    We have to reset/reinstall all our PC's and then we can integrate them to Microsoft Intune.
    The company who is managing all this deploy from their server to our PC's some app's and create
    the user credentials and access tights.
    I'm an Admin user but all my other coworkers are simple users, they can't install apps, change settings etc.
    So far everything is fine for me.

    Now comes to the hard part, to the problem:
    I must install FireFox v3.0 to the newly installed (deployed) PC.
    I login as a regular user, then install FireFox with admin rights.
    When I finish the installation and try to start FireFox v3.0 will crash every time I'm run it.

    If I uninstall FireFox.
    Create a new user with administrator credential.
    Login with that newly created user and install FireFox.
    Everything is fine.

    So to say, whenever I try to install or run Firefox 3.0 on a user created and configured by MS inTune I have problems.
    But on the same user, I can install the latest version of Firefox without any problem and it will run perfectly.

    My conclusion is, does the user credential what is set by the MS inTune is somehow wrong.
    And that is the reason why Firefox can not run as it should.
    But I can not figure out what permission setup I'm missing.
      My Computer


  4. Posts : 1,746
    Windows 10 Pro x64 22H2
       #4

    It would help if you first reproduce your problem and then gather and share relevant event logs:

    In PS as Admin run:

    Code:
    ni -ItemType Directory $env:SystemDrive\EventLog\ | Out-Null
    Get-WinEvent -LogName Setup | select Id, TimeCreated, LevelDisplayName, Message |
    fl > $env:SystemDrive\EventLog\setup.log
    
    Get-EventLog -LogName Application -EntryType Error, Warning |
    select EventID, TimeGenerated, Source, Message | sort TimeGenerated -Descending |
    fl > $env:SystemDrive\EventLog\application.log
    
    Get-EventLog -LogName Security |
    select EventID, TimeGenerated, Source, Message | sort TimeGenerated -Descending |
    fl > $env:SystemDrive\EventLog\security.log
    zip and share C:\EventLog
      My Computer


  5. Posts : 8,110
    windows 10
       #5

    May be worth using Mozbackup then installing from backup MozBackup - Backup tool for Firefox and Thunderbird it does still work
      My Computer


  6. EOF
    Posts : 85
    Win7 Ultimate
    Thread Starter
       #6

    Samuria said:
    May be worth using Mozbackup then installing from backup MozBackup - Backup tool for Firefox and Thunderbird it does still work
    Hmmm.... interesting path...
    I will give a try tomorrow and inform you about the situation.

    And I will also try the PS script too and post..

    - - - Updated - - -

    So, Firefox Backup didn't solved the problem.
    Jere is the picture what I get after I install FF and run it.

    User permission setting problem on Win10-error2.jpg

    I checked the permissions are for all the users set to full control.
    Also the read only box is unchecked.

    I have no idea where should I check...
      My Computer


  7. EOF
    Posts : 85
    Win7 Ultimate
    Thread Starter
       #7

    Hi there.
    So, after several days I come out with no result.
    I run the PS script and there is no errors or anything related to the problem.
    The OS is a fresh and clean windows 10 Enterprise edition of windows, which is integrated to inTune.

    When I reinstalled the OS and didn't integrated to inTune everything is fine.
    No problem with Firefox.

    I'm also discovered when the OS is integrated to the inTune I can not install lets say TeamViewer also.
    I got and error like NSIS error the install could not launch....

    I cant install TeamViewer and Firefox 3.0 even with "Run as Admin...".

    I also set any permission for all users I found on the system to have full control over everything.
    Also without success.


    It is somehow related to the online user or whatever.
    Is here somebody maybe who know how this MS inTune set up the user
    permissions or whatever which could affect this?

    I also tried on several PC's and no success on all who are integrated to inTune.

    I already found this thread here, what you think, could this be the problem in my case?
    Add Protected Folders to Controlled Folder Access in Windows 10
    But I disabled the real time protection in Windows Defender and that didn't solved my problem too.

    I have no more idea why is this happening.

    Thanks anyway...
      My Computer


 

  Related Discussions
Our Sites
Site Links
About Us
Windows 10 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 10" and related materials are trademarks of Microsoft Corp.

© Designer Media Ltd
All times are GMT -5. The time now is 15:19.
Find Us




Windows 10 Forums