QuickBooks and its users

QuickBooks and its users.



We have users in the office that require the use of quick books.

I have been instructed to install it on workstations etc. What I have come
to find is that in order to even run QuickBooks you need to be a power users
(this is the lowest membership) or Administrator of the machine you're
using.



This all being said poses a problem. Typically users of the system aren't
granted any rights in the domain other than Domain User. A few exceptions
have been made for some of the "SUITS" and "Programmers / Developers" whom
need full admin rights over the machine they use. This isn't the case for
every user, and I now seem to have to grant more rights to the user over the
workstation that they are using.



I know. If I was the one reading this I would reply with an answer like:
"If you can't trust your users to have elevated rights on your computer(s),
then why the hell would you trust them with data inside of QuickBooks.



The only answer I can get from the support at QuickBooks is that this is the
way the software works due to all the many background process that run
pertaining to their software.



So. now does any one have a suggestion for me as to how I can protect my
workstations and let users use software they need to do their job with?

Carey
Wed Mar 23 11:02:25 CST 2005

How to set, view, change, or remove special permissions for files
and folders in Windows XP
http://support.microsoft.com/default.aspx?scid=kb;en-us;308419

--
Carey Frisch
Microsoft MVP
Windows XP - Shell/User
Microsoft Newsgroups

Get Windows XP Service Pack 2 with Advanced Security Technologies:
http://www.microsoft.com/athome/security/protect/windowsxp/choose.mspx

-------------------------------------------------------------------------------------------

"Backup" wrote:

| QuickBooks and its users.
|
|
|
| We have users in the office that require the use of quick books.
|
| I have been instructed to install it on workstations etc. What I have come
| to find is that in order to even run QuickBooks you need to be a power users
| (this is the lowest membership) or Administrator of the machine you're
| using.
|
|
|
| This all being said poses a problem. Typically users of the system aren't
| granted any rights in the domain other than Domain User. A few exceptions
| have been made for some of the "SUITS" and "Programmers / Developers" whom
| need full admin rights over the machine they use. This isn't the case for
| every user, and I now seem to have to grant more rights to the user over the
| workstation that they are using.
|
|
|
| I know. If I was the one reading this I would reply with an answer like:
| "If you can't trust your users to have elevated rights on your computer(s),
| then why the hell would you trust them with data inside of QuickBooks.
|
|
|
| The only answer I can get from the support at QuickBooks is that this is the
| way the software works due to all the many background process that run
| pertaining to their software.
|
|
|
| So. now does any one have a suggestion for me as to how I can protect my
| workstations and let users use software they need to do their job with?

Alun
Wed Mar 23 11:01:16 CST 2005

You might investigate the Application Compatibility Toolkit, available from
http://www.microsoft.com/downloads/details.aspx?FamilyId=D7D08414-0136-492F-9AD9-CE8AEB7500C7 -
it has the ability to "fake out" several of the settings that applications
rely on when they insist on running as Power User or Administrator. It has
presets for Quickbooks 2000 and Quickbooks 5.0 - and there may be settings
you can use for other versions of Quickbooks.

One of the MVPs, Susan Bradley, offers her description of opening up
Quickbooks 2003 for regular users at
http://www.threatcode.com/quickbooks.htm - this is an external site, and not
supported by Microsoft. I offer it only as an alternative view that you
might not find immediately.

One purchasing tool you can use to ensure that your software will run
outside of Administrators is to look for the "Designed for Windows XP" logo.
Obviously, there are programs out there that run under regular user accounts
that do not have this logo, but the requirements for the "Designed for
Windows XP" logo include that the software run under a low privileged user
account (except for tools that need high privilege - administrative tools,
backup software and the like).

Alun.
~~~~
--
Software Design Engineer, Internet Information Server (FTP)
This posting is provided "AS IS" with no warranties, and confers no rights.
"Backup" <backup@yahoo.com> wrote in message
news:O6CPYU8LFHA.1144@TK2MSFTNGP09.phx.gbl...
> QuickBooks and its users.
>
>
>
> We have users in the office that require the use of quick books.
>
> I have been instructed to install it on workstations etc. What I have come
> to find is that in order to even run QuickBooks you need to be a power
> users (this is the lowest membership) or Administrator of the machine
> you're using.
>
>
>
> This all being said poses a problem. Typically users of the system aren't
> granted any rights in the domain other than Domain User. A few exceptions
> have been made for some of the "SUITS" and "Programmers / Developers" whom
> need full admin rights over the machine they use. This isn't the case for
> every user, and I now seem to have to grant more rights to the user over
> the workstation that they are using.
>
>
>
> I know. If I was the one reading this I would reply with an answer like:
> "If you can't trust your users to have elevated rights on your
> computer(s), then why the hell would you trust them with data inside of
> QuickBooks.
>
>
>
> The only answer I can get from the support at QuickBooks is that this is
> the way the software works due to all the many background process that run
> pertaining to their software.
>
>
>
> So. now does any one have a suggestion for me as to how I can protect my
> workstations and let users use software they need to do their job with?
>
>
>
>
>
>
>
>
>

Roger
Thu Mar 24 09:24:59 CST 2005

That particular software is and has always been an administratively
unfriendly, non-conformant application, and worse, as I hear it the
company has said they have no intent to cure their (I emphasize, their)
problem in the next release.

Other than the info from MVP Susan Bradley, who is quite well
informed on use of this application, you could just google to see
the approaches other have taken. You will find a long history,
and it includes issues backing up network shared files used by
the application, not just issues simply running the app.

A responsible vendor, with minor developer time investment,
can update their skillset and software to post-Win9x patterns.
At this late date, there are however still a few vendors that have
not seen the demand stated by their customers sufficiently to see
the impact their laggard behavior has on their market share.
People need, really, really need, to be expressive to these vendors
as to the considerations that go into purchase decisions, specifically
that the admin time needed for a non-compliant app that is not
certified as made for Windows is just not worth the total cost.

--
Roger Abell
Microsoft MVP (Windows Security)
MCSE (W2k3,W2k,Nt4) MCDBA
"Backup" <backup@yahoo.com> wrote in message
news:O6CPYU8LFHA.1144@TK2MSFTNGP09.phx.gbl...
> QuickBooks and its users.
>
>
>
> We have users in the office that require the use of quick books.
>
> I have been instructed to install it on workstations etc. What I have come
> to find is that in order to even run QuickBooks you need to be a power
users
> (this is the lowest membership) or Administrator of the machine you're
> using.
>
>
>
> This all being said poses a problem. Typically users of the system aren't
> granted any rights in the domain other than Domain User. A few exceptions
> have been made for some of the "SUITS" and "Programmers / Developers" whom
> need full admin rights over the machine they use. This isn't the case for
> every user, and I now seem to have to grant more rights to the user over
the
> workstation that they are using.
>
>
>
> I know. If I was the one reading this I would reply with an answer like:
> "If you can't trust your users to have elevated rights on your
computer(s),
> then why the hell would you trust them with data inside of QuickBooks.
>
>
>
> The only answer I can get from the support at QuickBooks is that this is
the
> way the software works due to all the many background process that run
> pertaining to their software.
>
>
>
> So. now does any one have a suggestion for me as to how I can protect my
> workstations and let users use software they need to do their job with?
>
>
>
>
>
>
>
>
>

Knox
Fri Mar 25 07:32:19 CST 2005

Hi, Alun,

Thanks very much for the link to treatcode. I had looked to solve this
issue and had not found this link. I can not believe that intuit hasn't
solved this for QB 2005. We are planning to upgrade to it later this year.

Knox
"Alun Jones [MSFT]" <alunj@online.microsoft.com> wrote in message
news:ejU5jp8LFHA.3512@TK2MSFTNGP15.phx.gbl...
> You might investigate the Application Compatibility Toolkit, available
> from
> http://www.microsoft.com/downloads/details.aspx?FamilyId=D7D08414-0136-492F-9AD9-CE8AEB7500C7 -
> it has the ability to "fake out" several of the settings that applications
> rely on when they insist on running as Power User or Administrator. It
> has presets for Quickbooks 2000 and Quickbooks 5.0 - and there may be
> settings you can use for other versions of Quickbooks.
>
> One of the MVPs, Susan Bradley, offers her description of opening up
> Quickbooks 2003 for regular users at
> http://www.threatcode.com/quickbooks.htm - this is an external site, and
> not supported by Microsoft. I offer it only as an alternative view that
> you might not find immediately.
>
> One purchasing tool you can use to ensure that your software will run
> outside of Administrators is to look for the "Designed for Windows XP"
> logo. Obviously, there are programs out there that run under regular user
> accounts that do not have this logo, but the requirements for the
> "Designed for Windows XP" logo include that the software run under a low
> privileged user account (except for tools that need high privilege -
> administrative tools, backup software and the like).
>
> Alun.
> ~~~~
> --
> Software Design Engineer, Internet Information Server (FTP)
> This posting is provided "AS IS" with no warranties, and confers no
> rights.
> "Backup" <backup@yahoo.com> wrote in message
> news:O6CPYU8LFHA.1144@TK2MSFTNGP09.phx.gbl...
>> QuickBooks and its users.
>>
>>
>>
>> We have users in the office that require the use of quick books.
>>
>> I have been instructed to install it on workstations etc. What I have
>> come to find is that in order to even run QuickBooks you need to be a
>> power users (this is the lowest membership) or Administrator of the
>> machine you're using.
>>
>>
>>
>> This all being said poses a problem. Typically users of the system
>> aren't granted any rights in the domain other than Domain User. A few
>> exceptions have been made for some of the "SUITS" and "Programmers /
>> Developers" whom need full admin rights over the machine they use. This
>> isn't the case for every user, and I now seem to have to grant more
>> rights to the user over the workstation that they are using.
>>
>>
>>
>> I know. If I was the one reading this I would reply with an answer like:
>> "If you can't trust your users to have elevated rights on your
>> computer(s), then why the hell would you trust them with data inside of
>> QuickBooks.
>>
>>
>>
>> The only answer I can get from the support at QuickBooks is that this is
>> the way the software works due to all the many background process that
>> run pertaining to their software.
>>
>>
>>
>> So. now does any one have a suggestion for me as to how I can protect my
>> workstations and let users use software they need to do their job with?
>>
>>
>>
>>
>>
>>
>>
>>
>>
>
>

Alun
Fri Mar 25 10:09:09 CST 2005

If the ability to run the accounting package as a non-administrative user is
important to you, there are two things you can do:
1. Contact vendors whose products you like, but which lack this feature, and
try to persuade them to implement it.
2. Find a vendor whose package specifically advertises that it supports this
feature, or that has the "Designed for Windows XP" logo.

Vendors produce software that sells. If their software doesn't sell so
well, maybe they will be encouraged to change their software.

Alun.
~~~~
--
Software Design Engineer, Internet Information Server (FTP)
This posting is provided "AS IS" with no warranties, and confers no rights.

"Knox" <thornNOSPAM99@hotmail.com> wrote in message
news:u$gsS8TMFHA.2648@TK2MSFTNGP14.phx.gbl...
> Hi, Alun,
>
> Thanks very much for the link to treatcode. I had looked to solve this
> issue and had not found this link. I can not believe that intuit hasn't
> solved this for QB 2005. We are planning to upgrade to it later this
> year.
>
> Knox
> "Alun Jones [MSFT]" <alunj@online.microsoft.com> wrote in message
> news:ejU5jp8LFHA.3512@TK2MSFTNGP15.phx.gbl...
>> You might investigate the Application Compatibility Toolkit, available
>> from
>> http://www.microsoft.com/downloads/details.aspx?FamilyId=D7D08414-0136-492F-9AD9-CE8AEB7500C7 -
>> it has the ability to "fake out" several of the settings that
>> applications rely on when they insist on running as Power User or
>> Administrator. It has presets for Quickbooks 2000 and Quickbooks 5.0 -
>> and there may be settings you can use for other versions of Quickbooks.
>>
>> One of the MVPs, Susan Bradley, offers her description of opening up
>> Quickbooks 2003 for regular users at
>> http://www.threatcode.com/quickbooks.htm - this is an external site, and
>> not supported by Microsoft. I offer it only as an alternative view that
>> you might not find immediately.
>>
>> One purchasing tool you can use to ensure that your software will run
>> outside of Administrators is to look for the "Designed for Windows XP"
>> logo. Obviously, there are programs out there that run under regular user
>> accounts that do not have this logo, but the requirements for the
>> "Designed for Windows XP" logo include that the software run under a low
>> privileged user account (except for tools that need high privilege -
>> administrative tools, backup software and the like).
>>
>> Alun.
>> ~~~~
>> --
>> Software Design Engineer, Internet Information Server (FTP)
>> This posting is provided "AS IS" with no warranties, and confers no
>> rights.
>> "Backup" <backup@yahoo.com> wrote in message
>> news:O6CPYU8LFHA.1144@TK2MSFTNGP09.phx.gbl...
>>> QuickBooks and its users.
>>>
>>>
>>>
>>> We have users in the office that require the use of quick books.
>>>
>>> I have been instructed to install it on workstations etc. What I have
>>> come to find is that in order to even run QuickBooks you need to be a
>>> power users (this is the lowest membership) or Administrator of the
>>> machine you're using.
>>>
>>>
>>>
>>> This all being said poses a problem. Typically users of the system
>>> aren't granted any rights in the domain other than Domain User. A few
>>> exceptions have been made for some of the "SUITS" and "Programmers /
>>> Developers" whom need full admin rights over the machine they use. This
>>> isn't the case for every user, and I now seem to have to grant more
>>> rights to the user over the workstation that they are using.
>>>
>>>
>>>
>>> I know. If I was the one reading this I would reply with an answer like:
>>> "If you can't trust your users to have elevated rights on your
>>> computer(s), then why the hell would you trust them with data inside of
>>> QuickBooks.
>>>
>>>
>>>
>>> The only answer I can get from the support at QuickBooks is that this is
>>> the way the software works due to all the many background process that
>>> run pertaining to their software.
>>>
>>>
>>>
>>> So. now does any one have a suggestion for me as to how I can protect my
>>> workstations and let users use software they need to do their job with?
>>>
>>>
>>>
>>>
>>>
>>>
>>>
>>>
>>>
>>
>>
>
>

Backup
Mon Mar 28 14:04:49 CST 2005

The people over in the tech department of intuit stated to me "
This isn't going to change, in any updates or new release. Also if you can't
trust your user why trust them to use your QuickBooks.

"

Knox
Mon Mar 28 18:55:22 CST 2005

That stupid mindset is keeping Windows and its applications back. It's not
a question of trust. It's a question of belts and suspenders. WHEN and not
if the inevitable worm, or virus, or keylogger, spyware, or rootkit attacks,
a limited user provides another wall of protection.

Intuit is not completely foolish about this issue. Intuit did improve
TurboTax. TurboTax 2004 will run under limited user, although it can't
upgrade itself if there's a patch. So Intuit definitely improved TurboTax
in this regard. Older TurboTax IIRC used to come up and say it requires
administrative privileges.

I currently have the users at my offices using RUNAS /savecred to run QB.


Knox


"Backup" <backup@yahoo.com> wrote in message
news:%236AiuE9MFHA.436@TK2MSFTNGP09.phx.gbl...
> The people over in the tech department of intuit stated to me "
> This isn't going to change, in any updates or new release. Also if you
> can't trust your user why trust them to use your QuickBooks.
>
> "
>
>